Professional Documents
Culture Documents
SWM0101 MCP Software Configuration Guide V311 R1
SWM0101 MCP Software Configuration Guide V311 R1
Grid Solutions
MultilinTM MCP
Substation Gateways
GE Information
MCP Software Configuration Guide
Copyright Notice
©2021, General Electric Company. All rights reserved.
The information contained in this online publication is the exclusive property of General Electric Company, except as otherwise indicated.
You may view, copy and print documents and graphics incorporated in this online publication (the “Documents”) subject to the following: (1)
the Documents may be used solely for personal, informational, non-commercial purposes; (2) the Documents may not be modified or altered
in any way; and (3) General Electric Company withholds permission for making the Documents or any portion thereof accessible via the
internet. Except as expressly provided herein, you may not use, copy, print, display, reproduce, publish, license, post, transmit or distribute
the Documents in whole or in part without the prior written permission of General Electric Company.
The information contained in this online publication is proprietary and subject to change without notice. The software described in this
online publication is supplied under license and may be used or copied only in accordance with the terms of such license.
Trademark Notices
GE, Multilin and are trademarks and service marks of General Electric Company.
2 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide Table of Contents
Table of Contents
GE Information SWM0101-3.11-1 3
MCP Software Configuration Guide Table of Contents
4 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide Table of Contents
GE Information SWM0101-3.11-1 5
MCP Software Configuration Guide Table of Contents
6 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide Table of Contents
GE Information SWM0101-3.11-1 7
MCP Software Configuration Guide Table of Contents
8 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide Table of Contents
Connection...................................................................................................................................................................................................... 482
Configure Serial Communications ..................................................................................................................................................... 482
Configure Network Communications ............................................................................................................................................... 492
Configure D.20 .............................................................................................................................................................................................. 498
Configuring Client Applications .................................................................................................................................................................. 504
Client Configuration Overview.............................................................................................................................................................. 504
DNP3 Multi-drop .......................................................................................................................................................................................... 505
DNP IED Block ................................................................................................................................................................................................ 508
IEC 60870-5-101 Multi-drop .................................................................................................................................................................. 512
IEC 60870-5-103 Multi-drop .................................................................................................................................................................. 514
IEC 60870-5-104 IED Block .................................................................................................................................................................... 516
Modbus Multi-drop ..................................................................................................................................................................................... 518
Modbus TCP or TCP/SSH IED Block .................................................................................................................................................... 519
Generic ASCII Client .................................................................................................................................................................................... 521
SEL Binary ........................................................................................................................................................................................................ 523
LogicLinx Device .......................................................................................................................................................................................... 524
SNMP Block ..................................................................................................................................................................................................... 524
Configure to acquire files (ARRM) .............................................................................................................................................................. 525
Automated Record Retrieval Manager Overview ...................................................................................................................... 525
ARRM Configuration ................................................................................................................................................................................... 526
ARRM Viewer .................................................................................................................................................................................................. 526
ARRM Pseudo Points .................................................................................................................................................................................. 527
Enterprise Synchronization .................................................................................................................................................................... 528
Applications - ARRM ................................................................................................................................................................................... 528
File Set Template - Standard ................................................................................................................................................................. 535
File Set Template – Sel ASCII.................................................................................................................................................................. 537
About Oscillography files and IEEE File ............................................................................................................................................ 538
Connection Polling ...................................................................................................................................................................................... 539
ARRM FTP Directory Delta Support for Different ftp ls Formats ......................................................................................... 541
Sample File Set Templates for Relay Models ................................................................................................................................ 542
ARRM ASCII Directory Delta Support ................................................................................................................................................. 544
Configure Automation Features ................................................................................................................................................................ 545
Configuration Overview ........................................................................................................................................................................... 546
System Point Manager ............................................................................................................................................................................. 547
Accumulator Freeze ................................................................................................................................................................................... 547
GE Information SWM0101-3.11-1 9
MCP Software Configuration Guide Table of Contents
10 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide Table of Contents
GE Information SWM0101-3.11-1 11
MCP Software Configuration Guide Table of Contents
12 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide Table of Contents
GE Information SWM0101-3.11-1 13
MCP Software Configuration Guide Table of Contents
14 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide Table of Contents
GE Information SWM0101-3.11-1 15
MCP Software Configuration Guide Table of Contents
16 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide Figures
Figures
17 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide Figures
18 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide Tables
Tables
19 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide Tables
20 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide Tables
GE Information SWM0101-3.11-1 21
MCP Software Configuration Guide Tables
22 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide Tables
GE Information SWM0101-3.11-1 23
MCP Software Configuration Guide Tables
24 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide Tables
GE Information SWM0101-3.11-1 25
MCP Software Configuration Guide Tables
26 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide Tables
GE Information SWM0101-3.11-1 27
MCP Software Configuration Guide Tables
28 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide Tables
GE Information SWM0101-3.11-1 29
MCP Software Configuration Guide Tables
Table 7-36: IEC 101 with MCP as Master – Device Level – Digital Input Points...................................................................... 776
Table 7-37: IEC 101 with MCP as Master – Device Level – Digital Output Points .................................................................. 776
Table 7-38: IEC 101 with MCP as Master – DCA Level – Accumulator Points ......................................................................... 777
Table 7-39: IEC 101 with MCP as Master – DCA Level – Digital Input Points ........................................................................... 777
Table 7-40: IEC 101 with MCP as Master – DCA Level – Digital Output Points ....................................................................... 777
Table 7-41: IEC 101 with MCP as Slave – Accumulator Points........................................................................................................ 778
Table 7-42: IEC 101 with MCP as Slave – Analog Input Points ........................................................................................................ 779
Table 7-43: IEC 101 with MCP as Slave – Digital Input Points ......................................................................................................... 779
Table 7-44: IEC 101 with MCP as Slave – Digital Output Points ..................................................................................................... 779
Table 7-45: IEC 104 with MCP as Master – Device Level – Accumulator Points .................................................................... 780
Table 7-46: IEC 104 with MCP as Master – Device Level – Digital Input Points...................................................................... 781
Table 7-47: IEC 104 with MCP as Master – Device Level – Digital Output Points .................................................................. 782
Table 7-48: IEC 104 with MCP as Master – DCA Level – Accumulator Points ......................................................................... 782
Table 7-49: IEC 104 with MCP as Master – DCA Level – Digital Input Points ........................................................................... 783
Table 7-50: IEC 104 with MCP as Master – DCA Level – Digital Output Points ....................................................................... 783
Table 7-51: IEC 104 with MCP as Slave – Accumulator Points........................................................................................................ 784
Table 7-52: IEC 104 with MCP as Slave – Analog Input Points ........................................................................................................ 785
Table 8-1: Example Distinguished Name Components ...................................................................................................................... 832
Table 8-2: Example Distinguished Name Components ...................................................................................................................... 833
Table 8-3: Location of Files Exported by Certification Authorities ................................................................................................ 834
30 SWM0101-3.11-1 GE Information
About this Document
Purpose
This guide provides detailed information on how to configure the software of the Multilin TM MCP Substation
Gateway. Although this document describes all the configurable software applications in the MCP, only the
applications you purchased for your MCP are available to you.
This document applies to the entire MCP family (G100/G500) unless otherwise indicated.
Screen captures may show G100 or G500 in some areas, however the workflow applies to
products in the MCP family (G100/G500), unless otherwise indicated.
This document reflects functions available in the following product versions:
- G500 V2.60
Please refer to previous versions of this document for previous MCP releases.
Intended Audience
This document is a helpful resource for utility personnel and system engineers who are implementing the MCP in
an overall substation automation system, and protection engineers who are controlling network devices. It is
intended for readers who have knowledge of substation automation equipment and applications.
Additional Documentation
For further information about the MCP, refer to the following documents:
• G100 Substation Gateway Instruction Manual (994-0155)
• G500 Substation Gateway Instruction Manual (994-0152)
• MCP HMI Online Help
• DS Agile MCP Studio Online Help
• G100 Quick Start Guide (SWM0116)
• G500 Quick Start Guide (SWM0106)
• Configuring UEFI Settings on G100 User Guide (SWM0122)
• Configuring UEFI Settings on G500 User Guide (SWM0110)
GE Information SWM0101-3.11-1 31
How to Use this Guide
This guide describes how to configure the MCP. The MCP employs sophisticated applications that contain many
advanced features and capabilities. To successfully configure and operate the MCP for your substation
environment, it is highly recommended that you work through this entire guide.
Where appropriate, a detailed Table of Contents is provided at the beginning of a chapter.
If you need assistance, contact General Electric Company GE Grid Solutions Technical Support.
In configuration tables, “N/A” in the “Default” column indicates there is no default setting provided, and “X”
indicates the number is automatically incremented.
Important information about the product, product handling which must be given attention.
32 SWM0101-3.11-1 GE Information
Product Support
If you need help with any aspect of your GE Grid Solutions product, you can:
• Access the GE Grid Solutions Web site
• Search the GE Technical Support library
• Contact Technical Support
GE Information SWM0101-3.11-1 33
Chapter 1 - MCP Basics
MCP Multi-function Controller Platform
GE’s advanced Multi-function Controller Platform (MCP) offers a high-capacity, secure, substation hardened set
of modular and expandable hardware and software components designed to simplify deployment, operation,
and maintenance of automation systems for a variety of applications including:
• Transmission & Primary distribution centralized automation,
• Secure substation automation systems
The MCP family is currently composed of the following Substation Gateway models:
- G100 – please refer to G100 Substation Gateway Instruction Manual (994-0155)
- G500 – please refer to G500 Substation Gateway Instruction Manual (994-0152)
The MCP implementation makes it possible for a single device to host multiple functions and applications such
as Supervisory Control and Data Acquisition (SCADA) Concentrator, Remote terminal Unit (RTU), Human Machine
Interface, Ethernet Switch functions, Data Storage among others. Consolidation of functions reduces the cost of
deployment and operation while increasing system reliability through a reduced number of devices in the system.
Key Benefits
• Standardize Substation Architectures with a cost-effective IEC 61850-3 compliant platform capable of
handling small to large systems.
• Simplify Engineering and operations through consolidation of functions.
• Reduce equipment cost by eliminating dedicated HMI computers, external Ethernet.
• Optimize Cyber Security management with hardened Linux based operating system and container
technologies enabling modular updates instead of single image updates.
• Improve time synchronization performance internal IRIG-B Signal Generation.
GE Information SWM0101-3.11-1 34
MCP Software Configuration Guide MCP Basics
GE Information SWM0101-3.11-1 35
MCP Software Configuration Guide MCP Basics
UEFI Settings
The G100 and G500 have different UEFI settings, described in the documents below, for each product model:
• Configuring UEFI Settings on G100 User Guide (SWM0122)
• Configuring UEFI Settings on G500 User Guide (SWM0110)
G100 device has the following UEFI settings that will revert to default values after the internal super capacitor
has been discharged due to the device being powered off for extended time (typically more than 5 days).
These UEFI settings are applicable only while the G100 is starting.
After the applications started, these settings are over-written by the values configured in MCP Local
Configuration Utility (mcpcfg) and MCP Settings GUI
• Default Serial Maintenance Port used as UEFI (boot) console when KVM is not available
(Advanced->Serial Port Console Redirection)
o Console Redirection is set to Disabled for COM1-COM3, please do not change these settings.
o Console Redirection for COM4 should be enabled/disabled and have the “Bits per second”, to be
same as in the Serial Maintenance Port in MCP Studio (See Serial Maintenance Port on page 482).
• Default Serial Ports Modes (Advanced->Super IO Configuration)
o Please ensure are enabled/disabled as required for secure hardening purposes and set to RS-232.
Users should check again these UEFI settings when the G100 is powered on again, and adjust as necessary.
36 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
• NTP
• SCADA
IN \OUT PTP OUT IRIG-B TTL OUT NTP OUT SCADA OUT (to IEDs)
PTP IN ✓ G500 Not Available ✓ MCP ✓ MCP
IRIG-B TTL IN Not Available ✓ MCP Note 2 ✓ MCP ✓ MCP
NTP IN Not Available Not Available ✓ MCP ✓ MCP
SCADA IN Not Available Not Available ✓ MCP ✓ MCP
(from Masters)
NONE IN Not Available Not Available ✓ MCP Note 1 ✓ MCP Note 1
GE Information SWM0101-3.11-1 37
MCP Software Configuration Guide MCP Basics
- The internal RTC is powered by a super capacitor, and its value is used at startup if the super
capacitor was not discharged. If the super capacitor was discharged the system will use the last
valid time when was last powered on. Please refer to the G500 Instruction Manual and Data Sheet
for the super capacitor time availability when the unit is powered off.
- When NTP/SCADA are used as time synchronization input sources, the internal CPU does not act as
a time source of synchronization to the G500 FPGA and the G500 PTP/IRIG-B outputs are disabled.
G100:
- Note 2IRIG-B OUT in G100 is repeated from the IRIG-B IN signal, there is no internal FPGA to generate
the signal
- When IRIG-B Input is enabled and a valid IRIG-B Signal is present, G100 software-based decoding
synchronizes the time to the CPU, which in turn provides time as a source to an internal Real Time
Clock (RTC), NTP OUT or SCADA OUT (i.e. to IEDs via supported SCADA protocols).
- The internal RTC is powered by a super capacitor, and its value is used at startup if the super
capacitor was not discharged. If the super capacitor was discharged the system will use the last
valid time when was last powered on. Please refer to the G100 Instruction Manual and Data Sheet
for the super capacitor time availability when the unit is powered off.
- When NTP/SCADA are used as time synchronization input sources, the G100 does not provide an
IRIG-B OUT time signal.
MCP Settings
This part of the configuration is associated with the MCP hardware, UEFI, Serial port settings, LAN configuration,
Time settings, Administrators User management etc.
These configuration settings are performed online using either MCP Local Configuration Utility (mcpcfg) or MCP
Settings GUI, or a browser-based utility called Predix Edge Technician Console (PETC) or the MCP Runtime HMI.
38 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
Ethernet Settings
All the MCP network interfaces are configured using online MCP Local Configuration Utility (mcpcfg) or MCP
Settings GUI. In addition to the Gateway connectivity, a browser-based utility called Predix Edge Technician
Console (PETC) is used to configure the Maintenance Port for Edge connectivity.
Refer to Chapter 8 - EdgeManager and PETC for port availability and additional information.
The remaining Ethernet Ports are used for SCADA/Gateway connections and Edge Connectivity which can be
enabled on one designated port. User can configure them using “single” mode of configuration using mcpcfg.
The default administrator (defadmin) user will be deleted automatically once the default administrator
(defadmin) is logged out and logs in successfully with the newly added administrator user.
MCP Configuration
This section provides an overview of each DS Agile MCP studio and the basic steps to configuring the MCP.
G100 devices can be converted to G500 devices.
G500 devices can be converted to G100 devices, with the user required to resolve and re-allocate the less
available ports in G100 (Serial, Net).
This part of the configuration is associated with the configuring Gateway/SCADA specific configuration using
DS Agile MCP Studio’s offline and online configuration tools. This configuration includes configuring
IEDs/master stations/automation applications/HMI settings/security settings or system configurations etc. The
user would like to customize the following aspects of the MCP configuration management through offline and
online editors using DS Agile MCP studio:
• Communication connections
• Device data collection
• Master Station data presentation
• Alarm annunciation
• Data calculation
• Data logging
• Operational (One-Line) diagrams
• User management
• HMI preferences
• E-mail notification
• Open VPN and Secure SCADA
• Passthrough and Terminal server
GE Information SWM0101-3.11-1 39
MCP Software Configuration Guide MCP Basics
• Device Redundancy
System/PC Requirements
Minimum Windows 7 x64, 10 x64 and 8GB Memory required for DS Agile MCP Studio and MCP Runtime HMI.
The MCP Runtime HMI runs as a standalone application, so the installation of the Java/JRE on the
Windows PC is not required.
Offline Editor
The Offline Editor is used to create, edit and update the software configuration of the MCP. The Offline
Configuration Tool is a component of the DS Agile MCP Studio.
Offline Editor (DS Agile MCP Studio) is used to:
• Set up MCP communications to devices and masters (serial or network connections)
• Select and/or create point maps (for devices and masters)
• Configure alarms
• Create custom data calculations
• Set system preferences
• Create one-line diagrams
• Create Secure SCADA and Open VPN server configurations
All these configurations changes will not take effect until “Sync To” operation is performed through DS Agile MCP
studio.
One-Line designer
The One-Line Designer is a specialized drawing tool for creating substation one-line diagrams and forms, such
as a Digital Event Manager panel. The One-Line Designer is accessed from within the DS Agile MCP Studio Offline
Editor/Configuration Tool.
You must have either Administrator or Supervisor privileges to access the offline configuration tool. It is
suggested that either one Administrator or Supervisor user at a time can be logged in to perform configuration
functions.
This manual provides detailed information on the configurable settings in the MCP, and how to configure the
MCP to work with various aspects of the substation system.
For more information about using the MCP offline Configuration Tool, functions and screens refer to the MCP
online Help in DS Agile MCP Studio.
Online Editor
The Online Editor monitor the status of your substation network, view data, execute control commands and
change the system set-up by connecting to the MCP. In addition to this, Online Editor can also be used to
configure MCP SCADA and Gateway configuration including One-Line Diagrams. The Online Editor includes the
following components:
40 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
• Online Editor is used to view and control the operation of the MCP.
• Online Editor includes optional One-Line Viewer for viewing one-line diagrams.
• Power Bar buttons also give access to MCP display screens and utilities.
• SCADA/Gateway configuration including One-Line Designer in the Connected Mode to MCP.
LogicLinx (optional)
LogicLinx is a tool that enables the user to create automation applications that have traditionally been too costly
or difficult to implement - all without hard wiring. Using any or all the IEC 61131-3 programming languages, the
user can create automation routines that run on the MCP.
LogicLinx automation routines are created using the LogicLinx editor. The LogicLinx Wizard within DS Agile MCP
Studio is then used to configure and upload the LogicLinx application to your MCP.
For more information on using LogicLinx, refer to the LogicLinx on a MCP Quick Start Guide (GE Ref Number-
SWM0107).
Snapshots
“Snapshot” is an archived image of the device configuration taken (that is, saved) at a given time, in the form of
a special compressed file. It can be saved using DS Agile MCP Studio, which includes all settings required to
completely recover a MCP device.
• Multiple snapshots can be saved for the same device configuration, at different times, using different
names with different storage paths.
• A snapshot can be restored to the same device or to a different device.
• The MCP Gateway device must be configured for SSH and SFTP services, for this feature to be used.
• The Snapshots greatly reduce time when replacing hardware (MCP) and copying a reference
configuration to multiple devices, eliminating the need for additional manual configuration
Snapshot restoration updates the new MCP (i.e., target MCP) with the following hardware and software settings
as were defined in the original MCP (i.e., source MCP), at the time of the snapshot was taken, if the respective
options were selected to be saved:
• User Authentication
• Network Settings
• Network Interfaces
• Secure Access
• Firewall settings
GE Information SWM0101-3.11-1 41
MCP Software Configuration Guide MCP Basics
• Host Names
• Time settings and time synchronization
• Local HMI settings – except number of displays and displays resolution which are specific to the MCP
being restored
• Synch Manager
• Redundancy (except paired keys when the MCP target is already paired as redundant) (Not supported
in G100)
• Emulation of D20 IEC101 DPA Unbalanced Mode and quality event suppression at startup
• Serial port modes (RS232/485, 2/4 wires)
• Configuration implemented in MCP Studio:
o Connections
o Client and Server Map files
o System Point Manager
o Alarms
o Calculator
o Data Logger (storage may need to be re-adjusted if the target MCP has different storage sizes)
o Load Shed
o Systemwide (storage may need to be re-adjusted if the target MCP has different storage sizes)
o Access (Local users, Automatic HMI login settings, VPN Client List)
o ARRM
o AI Text Enumeration
o One-line Screens
o Analog Reports
o IEC61850 Client
o LogicLinx
Cyber security related Certificates are not included in the Snapshot, and therefore cannot be restored. To comply
with cyber security requirements, all certificates must be imported again to the target MCP, after the snapshot is
restored. All secure connections using certificates must be re-associated with the new imported certificates (e.g.
Secure Connection Relay, VPN Server, etc.)
Snapshot restoration results in a MCP configured into Local Authentication mode, even though snapshot
contains the Remote Authentication (this is to avoid possible lockout scenarios). However, all the Remote
Authentication configuration settings will get restored as part of snapshot. You need to re-install the certificates
and reconfigure the Remote Authentication using the restored configurations.
The keys associated with Sync Manager (rsync/SSH, SFTP), Modbus TCP/SSH secure tunnel and ARRM SFTP are
not restored with snapshot due to cyber security requirements, and these sessions shall have to be re-paired
again by user.
License file (key) is not restored with the snapshot because this is hardware ID specific.
MCP enrollment in EdgeManager Cloud and associated settings are not restored with the snapshot. Refer to
Predix Edge Technician Console - See PETC for more details.
42 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
Snapshot Compatibility
The following table shows the Snapshot Compatibilities between DSAS and GE’s Gateway devices:
FULL "Clone"
Snapshot compatibility Restore snapshot Restore snapshot
Configuration+Settings (Configuration and Settings) (Only Configuration part)
(using DSAS 2.1 or to target device: to offline device:
later)
MCP MCP
D400 (G500/G100 D400 (G500/G100
Save snapshot within same type) within same type)
from device:
2.00
or Any 2.00
Any version 1.00 1.10 later version 1.00 1.10 or later
YES
YES
ONLY same
Direct
<= 5.20 D400 N/A N/A N/A N/A N/A N/A
same
and same
version
version
D400
YES
YES Indirect Indirect Indirect
ONLY same
Direct Via Via Via
5.30 or later D400 N/A N/A N/A
same Create Create Create
and same
version MCP MCP MCP
version
Indirect
YES YES
YES Via
MCP 1.10 N/A N/A ANY ANY N/A N/A
Direct Offline
MCP MCP
Upgrade
YES
YES
Direct
2.00 or later N/A N/A N/A ANY N/A N/A N/A
same
MCP
version
Note: The above table also shows the snapshot compatibility of DSAS with D400® Substation Gateway.
Snapshot Management
Using DS Agile MCP Studio:
- Snapshots can be saved from the MCP using only administrator user credentials.
- Snapshots can be restored to the MCP using the “defadmin” default credentials or any other configured
administrator user credentials.
GE Information SWM0101-3.11-1 43
MCP Software Configuration Guide MCP Basics
Types of Snapshots
There are two types of snapshots:
1. Standard Snapshot
• Standard Snapshot is used between one MCP to any MCP of same firmware version.
• Standard snapshot may contain user credentials, internal saved secrets, Network settings and
Logs – if the user selects the option to include them.
• The name of the Standard Snapshot ends with the extension - *.MCPSnapshot.DS7zip
• e.g. MCP_V100.MCPSnapshot.DS7zip, while saving the Standard Snapshot (the italic text is
entered as name by the user)
2. MCP Clone Snapshot
• MCP Clone snapshots contain all information associated with a running MCP (configurations,
settings, users, internal configured “secrets” for IED access, etc. – except certificates).
• MCP Clone Snapshots are the primary instrument used as source image in “disaster recovery”
workflows.
• MCP Clone Snapshots may be used with the same firmware version or across different firmware
versions from one version to a newer one.
• The name of the MCP Clone Snapshot contains the extension - *.MCPCloneSnapshot.DS7zip
44 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
2. Various methods to save Standard Snapshot are given below with detailed steps. Standard snapshot can
be saved by any of the below methods:
a. Right click on the device,
Archive → Save → Save Snapshot
c. Sync from Device → Save Snapshot (for this method, skip step ‘3’ and proceed to step ‘4’)
GE Information SWM0101-3.11-1 45
MCP Software Configuration Guide MCP Basics
d. File menu,
i. Archive → Snapshot section → Save
3. Then (except for step ‘2(c)’), specify the IP address of the source MCP and type of snapshot as ‘Standard’, as
shown below:
46 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
5. Type in an Optional password (for integrity checking) and make sure it meets password strength
requirements.
6. If the device contains internal configuration “secrets” (e.g. IED or ARRM passwords used for Machine-to-
Machine connections) – a password is mandatory to protect the snapshot. Alternatively, the user has a
choice to remove the “secrets”.
Important: This password is used only to protect the snapshot that will be created. This is separate from
any passwords used for user credentials or other “secrets” configured in the device. Ensure that this
snapshot password is available if restoration is required later. There is no alternative method through
GE Grid Solutions to obtain the correct password.
GE Information SWM0101-3.11-1 47
MCP Software Configuration Guide MCP Basics
When you begin typing characters in the password field, additional information is presented, guiding
you to meet password strength requirements.
The tracking and checking of snapshot (archive) file integrity and non-tampering may be disabled from
the Global System Preferences window:
i. For all Snapshot contents options except Information required to clone the device, the
snapshot file may be optionally secured by specifying a password.
ii. If the device contains internal configuration “secrets”, a password is mandatory to protect the
snapshot. Alternatively, the user has a choice to remove the “secrets”.
iii. If a password is provided, DS Agile Studio can check the snapshot (archive) file for integrity and
non-tampering at restoration time.
iv. If a password is not provided, the snapshot (archive) file is valid, but does not contain
information used for integrity and tamper-proof checking at restoration time.
v. When a password is provided, the snapshot file content – except (Information required to clone
the device) – is not encrypted, allowing users who forgot the password to restore the snapshot
data, but without the integrity check.
vi. For the Snapshot contents: Information required to clone the device option, sensitive data
and information is included in the snapshot file; consequently, a password must be provided.
• Sensitive data and information contain configured local user accounts, internal secrets
like credentials used for IED access (e.g. SEL Binary access), ARRM secured file transfers
parameters, and Dial-in and Email configuration.
• If the Snapshot contents: Information required to clone the device option was chosen
and a password is not typed in, the snapshot process does not continue, and you are
prompted again to:
• Provide a password
48 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
7. Upon clicking OK, a window pops up to re-enter and confirm the password, as shown below. Type in the
password again and proceed.
8. Then, device login window pops up, as shown below. Authenticate as a valid administrator user, by
providing the User Name and Password for the physical MCP Gateway device.
9. After successful login, the configuration files are downloaded from the MCP device and get saved in the
specified location.
GE Information SWM0101-3.11-1 49
MCP Software Configuration Guide MCP Basics
2. Various methods to restore Standard Snapshot to a Device are given below with detailed steps. Standard
snapshot can be restored by any of the below methods:
a. Right-click on the device,
i. Archive → Restore → Restore Snapshot
50 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
c. File menu,
i. Archive → Snapshot section → Restore
Note: if the workflow was started in the context of a device in the project, the IP address configured
for that device will be used automatically.
GE Information SWM0101-3.11-1 51
MCP Software Configuration Guide MCP Basics
o View the Archived Device Name. This read-only field shows the name of the archived device.
o View the Description in this read-only text field; this is the description entered when the snapshot
was saved.
o Select which type of data is to be restored:
52 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
Hint:
Selecting this option will restore all saved users and their credentials and will overwrite
existing users and credentials in the target MCP.
This is useful for deploying snapshots into MCP devices using the defadmin user account.
In some other cases it may be desired to restore the configuration and network settings, but
not the previous saved users credentials, because they were lost, and restoring them would
conduct to a MCP device that cannot be accessed. In this case, do not select this option.
7. Authenticate as a valid administrator user and login to the device, by providing the User Name and
Password for the physical MCP Gateway device.
GE Information SWM0101-3.11-1 53
MCP Software Configuration Guide MCP Basics
8. DS Agile Studio uploads the data file (Standard Snapshot) to the MCP Gateway device.
When restoring a snapshot image, the following data is not restored on the target device, even if was
included in the snapshot file:
o Log files
o Hardware, license and diagnostic information
2. Various methods to save MCP Clone Snapshot are given below with detailed steps. MCP Clone snapshot
can be saved by any of the below methods:
a. Right click on the device,
Archive → Save → Save Snapshot
54 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
c. Sync from Device → Save Snapshot (for this method, skip step ‘3’ and proceed to step ‘4’)
d. File menu,
Archive → Snapshot section → Save
GE Information SWM0101-3.11-1 55
MCP Software Configuration Guide MCP Basics
3. Then (except for step ‘2(c)’), specify the IP address of the source MCP and type of snapshot as ‘MCP Clone’,
as shown below:
56 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
Choose what data is to be saved in the device Snapshot contents by selecting the required
checkboxes:
Configuration data and : All snapshots contain configuration data and network settings; this
network settings checkbox is always selected by default.
Log files : Log files are created by the MCP Gateway device.
Hardware, license and : This information is used by the GE Grid Solutions Technical Support
diagnostic information team.
Information required to : This information allows you to clone an existing configuration; this
clone the device checkbox is always selected by default when saving MCP Clone
(password required) snapshots.
5. Type in the Mandatory password and make sure it meets password strength requirements.
Important: This password is used only to protect the snapshot that will be created. This is separate from
any passwords used for user credentials or other “secrets” configured in the device. Ensure that this
snapshot password is available if restoration is required later. There is no alternative method through GE
Grid Solutions to obtain the correct password.
When you begin typing characters in the password field, additional information is presented, guiding you to
meet password strength requirements.
6. Upon clicking OK, a window pops up to confirm the password, as shown below. Type in the password again
and proceed.
GE Information SWM0101-3.11-1 57
MCP Software Configuration Guide MCP Basics
7. Then, device login window pops up, as shown below. Authenticate as a valid administrator user, by
providing the User Name and Password for the physical MCP Gateway device.
8. After successful login, the configuration files are downloaded from the MCP device and get saved in the
specified location.
2. Various methods to restore Standard Snapshot to a Device are given below with detailed steps. Clone
snapshot can be restored by any of the below methods:
a. Right click on the device,
• Archive → Restore → Restore Snapshot
58 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
c. File menu,
• Archive → Snapshot section → Restore
GE Information SWM0101-3.11-1 59
MCP Software Configuration Guide MCP Basics
Note: if the workflow was started in the context of a device in the project, the IP address configured for
that device will be used automatically.
60 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
c. Wait for the Processing message to end (it may take few minutes).
The window will now change as following:
d. View the Archived Device Name. This read-only field shows the name of the archived device.
e. View the Description in this read-only text field; this is the description entered when the snapshot was
saved.
f. For MCP Clone snapshots all data types are selected to be restored and cannot be changed.
g. At this step, if the selected MCP snapshot contains internal configuration “secrets”, an option will be
available to reset (erase) all.
5. Click OK and then a login window appears, as shown below:
6. Authenticate as a valid administrator user and login to the device, by providing the User Name and
Password for the physical MCP Gateway device.
GE Information SWM0101-3.11-1 61
MCP Software Configuration Guide MCP Basics
7. DS Agile Studio uploads the data file (Clone Snapshot) to the MCP Gateway device.
When restoring a clone snapshot image, the following data is not restored on the target device, even if
was included in the snapshot file:
o Log files
o Hardware, license and diagnostic information
2. Upon clicking ‘Upgrade Firmware Version’, a window ‘Upgrade MCP Clone Snapshot details’ pops up, as
shown below:
62 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
d. View the Archived Device Name. This read-only field shows the name of the archived device.
e. View the Description in this read-only text field; this is the description entered when the snapshot was
saved.
4. Click OK. The following message will be displayed:
5. This completes the upgrade procedure of the Clone snapshot and will be saved in the specified location as
{ArchiveFilename}_v220.MCPCloneSnapshot.DS7zip.
GE Information SWM0101-3.11-1 63
MCP Software Configuration Guide MCP Basics
• Launch mcpcfg -> Gateway Settings menu and the Select option #22 ‘Restore Clone Snapshot’ from
the menu, as shown below:
• Confirm and acknowledge the Snapshot restoration (followed by a reboot) by pressing ‘Y’, as shown
below:
• Then, list of clone snapshots available in the USB will be displayed on the screen, as shown below.
64 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
• Confirm and acknowledge the Snapshot restoration (followed by a reboot) by clicking ‘Yes’, as shown
below:
• Then, list of clone snapshots available in the USB will be displayed on the screen, as shown below.
GE Information SWM0101-3.11-1 65
MCP Software Configuration Guide MCP Basics
Redundancy - Snapshots
This is not supported in MCP.
In case of Redundant configuration of MCPs, below steps can be followed for saving the snapshots
(Standard/MCP Clone Snapshot) from a pair of Redundant MCP's and restore them into ANY pair of Redundant
MCP's.
66 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
NOTE: Power ON both the MCP’s once the snapshots are restored successfully.
GE Information SWM0101-3.11-1 67
MCP Software Configuration Guide MCP Basics
68 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
10. In this case the password is mandatory, to protect the secrets in the archive. Alternatively, the secrets can
be removed by checking the box Exclude IED and email passwords from archive, in which case a
password is no longer mandated.
Note: once excluded, they cannot be recovered, and will have to be entered manually.
GE Information SWM0101-3.11-1 69
MCP Software Configuration Guide MCP Basics
70 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
2. Upon clicking ‘Restore’, a window ‘Restore Project Details’ pops up, as shown below, in which details of
archived project to be entered:
7. Alternatively, the secrets can be removed from all restored devices inside the project by checking the box
Reset IED and email passwords in restored device(s), in which case a confirmation will be required:
Note: once reset, they cannot be recovered, and will have to be entered manually.
GE Information SWM0101-3.11-1 71
MCP Software Configuration Guide MCP Basics
The following sections explain the procedure to save and restore the MCP’s device as an archive using DS Agile
MCP Studio.
3. Alternatively, right click on the MCP device and select Archive → Save → Save option:
72 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
GE Information SWM0101-3.11-1 73
MCP Software Configuration Guide MCP Basics
7. Device will be saved now at the specified file location as name.device.DS7zip. It can be used to restore, as
needed.
8. If the device contains encrypted “secrets”, the dialog at step 4 will prompt to enter the mandatory
snapshot password:
9. Alternatively, the secrets can be removed from all restored devices inside the project by checking the box
Exclude IED and email passwords from archive, in which case a confirmation will be required:
Note: once excluded, they cannot be recovered, and will have to be entered manually.
74 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
2. Alternatively, right click on the project empty canvas and select Archive → Restore → Restore Device
Archive.
3. Upon clicking ‘Restore Device Archive’, a window ‘Restore Device Details’ appears, as shown below, in
which details of archived device to be entered.
5. Click OK and then verify that you trust the source of the archive/package and click Accept; the archive file
is restored to the device, as shown below:
GE Information SWM0101-3.11-1 75
MCP Software Configuration Guide MCP Basics
6. Then, DS Agile Studio popup will be displayed, indicating that the device has been restored.
7. If the device archive contains encrypted “secrets”, the dialog at step 3 will prompt to enter the mandatory
archive password:
8. Alternatively, the secrets can be removed from all restored devices inside the project by checking the box
Reset IED and email passwords in restored device(s), in which case a confirmation will be required:
Note: once reset, they cannot be recovered, and will have to be entered manually.
A Local HMI is also available for accessing the MCP through a local substation computer setup (via the display
port). The Local HMI provides the same operator functions for local display and control as the remote HMI with
few exceptions. For more information refer to Local HMI.
The MCP is protected by a Log In screen that requires a username and password to access the HMI. Your user
access level determines the screens and functions available to you.
76 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
Local HMI
The Local HMI provides access to the MCP through a local substation computer setup (via the display port)
MCP supports Local HMI by connecting the monitors using the display ports.
G100 supports 1 monitor and G500 supports 2 monitors.
GE Information SWM0101-3.11-1 77
MCP Software Configuration Guide MCP Basics
Monitor A Monitor B
The user can reconfigure the layout without changing the backend connections by dragging & dropping the
monitors and placing at the required position on Screen Layout canvas as described below.
e.g. When user configures connections such that Monitor A is connected to DP 2 and Monitor B is connected to
DP1 however chooses Monitor A as Primary and Monitor B as extended.
78 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
In this case by default Monitor B becomes Primary and Monitor A will move in extended mode. Now, open the
Screen Layout utility and drag the Monitor B (shown as Display port 1/DP1) to the right and Monitor A (Display
Port 0/DP 2) to the left.
Right click on Monitor A (Display Port 0/DP 2) and select it as Primary. Now click Apply button and close the utility.
These layout changes described above are shown below.
Figure 1-4: Monitor A (connected to Display Port0/DP2) becomes Primary & Monitor B (connected to Display
Port1/DP1) becomes Extended
Monitor B Monitor A
The configured layout will always be persisted once the Screen Layout utility is closed. And whenever the
HMI is relaunched, it will open as per the last configured layout.
GE Information SWM0101-3.11-1 79
MCP Software Configuration Guide MCP Basics
3. Type in your Username and Password. MCP doesn’t have default HMI user and it is required to create
a nominated administrator user to access HMI and create other HMI users.
4. Click Login.
Result: If your login is successful, the below MCP Home page appears.
80 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
The User Login level/role determines which MCP HMI features and functions the user can have access
to/support.
The MCP Local HMI contains a lock out feature which prevents you from logging in after several failed
attempts for a set period.
GE Information SWM0101-3.11-1 81
MCP Software Configuration Guide MCP Basics
Result: The MCP Local HMI closes and the MCP Login to Local HMI screen appears.
Click on the icon available on menu bar to connect to the command line prompt from the Local HMI. Once
the shell or window is launched then provide the administrator-level user credentials (Default Administrator or
Nominated Administrator) to connect to the MCP from the command line.
82 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
monitors connected to each MCP unit points to Active MCP only. The Local HMI Power Bar on each MCP Utility
indicates whether the Local HMI is showing information for its(this) MCP or the redundant (PEER) MCP.
GE Information SWM0101-3.11-1 83
MCP Software Configuration Guide MCP Basics
Note: The login mode is always secure HTTPS and the default port number is 443. If you need to
use a different TCP port, due to routing rules existing between the PC and MCP, you may enter it in
the form of IP: TCP, for e.g. 10.10.11.50:30500
84 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
The User Login level/role determines which MCP HMI features and functions the user can have access
to/support.
The MCP contains a lock out feature which prevents you from logging in after several failed attempts for
a set period.
GE Information SWM0101-3.11-1 85
MCP Software Configuration Guide MCP Basics
Result: The MCP Runtime HMI closes and the MCP Login to Local HMI screen appears.
86 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
By customizing a MCP Runtime HMI shortcut the user can predefine the login User, IP Address, or Remote Port.
1. Locate the MCP Runtime HMI shortcut.
2. Copy the shortcut to the desktop, or a desired location, or pin it to Taskbar or Start Menu.
3. Right click on the shortcut and select “Properties”.
4. Add the below parameters to the shortcut at the location “Target” as seen in the below table:
GE Information SWM0101-3.11-1 87
MCP Software Configuration Guide MCP Basics
Shortcut properties display updated “Target” data launches the HMI with the IP and pre-defiled
password.
5. Double clicking the newly created shortcut will launch the MCP Runtime HMI using the parameters
configured in the Target.
88 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
MCP Applications
Hot Standby redundancy : Two MCP units are connected using network (mandatory) and optional backup
serial communication links.
Only one MCP unit is active at a time.
Connection to an RS232 switch panel is optional.
The two MCP units are kept in constant data synchronization with respect to
their real-time databases. DNP3 (only) communications to master(s) offer a
seamless transition during redundancy switch-over.
Hot-Hot redundancy : Two MCP units are connected using network (mandatory) and optional backup
serial communication links.
Only one MCP unit is active at a time.
Connection to an RS232 switch panel is optional.
The two MCP units are kept in constant data synchronization with respect to
their real time databases.
Depending on configured parameters at communication protocol and port
level – either each MCP unit communicates independently and simultaneously
with the IEDs (assuming IEDs allow this), or one MCP unit (active) communicates
with the IEDs and then synchronizes its data constantly to the other MCP unit.
DNP3 (only) communications to master(s) offer a seamless transition during
redundancy switch-over.
No : If No Redundancy is configured, then all configured applications in MCP run
redundancy/Standalone independently on each MCP.
(Default)
Note : In Warm-Standby and Hot-Hot Redundancy modes, if D.20 is configured then there will be a default
D.20 Heart-beat link available in addition to the configured Redundancy Heart Beat communications . This
option is not available in Hot-Standby Redundancy mode.
GE Information SWM0101-3.11-1 89
MCP Software Configuration Guide MCP Basics
Client applications
This type of application typically interfaces with a substation device over a communications channel and collects
data points from it. The client application writes input point values to the real-time database and may process
control requests. Known previously within GE embedded devices as a Data Collection Application (DCA).
Server applications
This type of application typically allows the MCP to communicate with a master station or host computer over a
communications channel. The server application reads input point values from the real-time database and sends
control requests to it. Known previously within GE embedded devices as a Data Presentation Application (DPA).
Automation applications
This type of application manipulates data within the real-time database. The automation application can
examine the status and values of input points in the real-time database and accept control requests from server
applications or other automation applications. The automation application can process this data and then
update the values of the input points owned by the automation application or output points belonging to another
application. Known previously within GE embedded devices as a Data Translation Application (DTA).
90 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
Server Client
Master
Application Application Device(s)
Station
(DPA) (DCA)
System Point
Database
Automation
Application
(DTA)
GE Information SWM0101-3.11-1 91
MCP Software Configuration Guide MCP Basics
e.g. If MCP includes all the License Options then the combined License value is 002 + 004 + 016 = 022.
MODBUS TCP/SSH® ✓ ✓ ✓ ✓
Client
D.20 Client ✓ ✓ Not Available ✓
92 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
Alarm/Digital Event ✓ ✓ ✓ ✓
Manager
Calculator ✓ ✓ ✓ ✓
LogicLinx® ✓ ✓ ✓ ✓ Yes
ARRM (Automated Record ✓ ✓ Not Available ✓ Yes
Retrieval Manager)
Load Shed and ✓ ✓ Not Available ✓
Curtailment
Analog Reports ✓ ✓ Not Available ✓
Runtime HMI ✓ ✓ ✓ ✓
System Utilities ✓ ✓ ✓ ✓
User Management ✓ ✓ ✓ ✓
GE Information SWM0101-3.11-1 93
MCP Software Configuration Guide MCP Basics
User Roles
Default Users
The MCP unit that comes from the factory has two types of default users.
defadmin : The MCP default administrator defadmin is used to connect to MCP from Secure Terminal
Emulator client from the command line interface of Local HMI. The default password of default
administrator user is defadmin. When user logins using defadmin, below set of operations
only can be performed.
• To change or configure IP Address
• To add a nominated administrator-level user(s).
• To restore MCP Snapshots
• To reboot the MCP.
The default administrator (defadmin) user will be deleted automatically once the
default administrator (defadmin) is logged out and logs in successfully with the
newly added administrator user.
root : The MCP default root user is available from serial maintenance port. The default password for
the root user is geroot.
• Restricted to local access only
It is strongly suggested to change the password of the root user by using MCP Local Configuration Utility
(mcpcfg) or MCP Settings GUI . Also, the User is responsible for the new root password. And in case root
password is lost then there is no back door and Return Materials Authorization (RMA) is required to
recover. Refer to User Management section for more details.
94 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
By default, access to the SSH clients and other command-line tools is limited to Administrator level and
Passthrough-level users only. This setting is available through the mcpcfg tool.
See mcpcfg - Gateway Configuration Utility for more information.
User Authentication
When user log in to the MCP, user account is authenticated by the system. The following items are verified:
• Username exists
• User entered password corresponds to the configured password
• User assigned permission levels
• Total number of simultaneous users permitted for user security permission level is not exceeded
• Record of log in
If user have a problem logging into the system, check the above items for a conflict.
GE Information SWM0101-3.11-1 95
MCP Software Configuration Guide MCP Basics
Authentication Modes
MCP supports both Local and Remote Authentication Modes and the Local Authentication Mode is enabled by
default.
Authentication Rules
Authentication rules for different user types and services are provided in the following table:
User Type
Admin User Types HMI User Types SSHP
Service Additional Security Notes
Administr Supervi Operat Observ assTh
root rough
ator sor or er
Local HMI Not Allowed Allowed Allowed Allowed Not The Local HMI session is automatically
Allowed Allowed started with Operator privileges without
prompting for user credentials, if the
Systemwide configuration > Access
Manager > Local UI Automatic Login
parameter is set to true.
Allowed Allowed Not Not Not Not
Maintenance
(Command (Command Allowed Allowed Allowed Allowed
Network
Prompt) Prompt)
Port
Not Allowed Allowed Allowed Allowed Not
Remote HMI
Allowed Allowed
SSH (Secure Not Allowed Not Not Not Not
Remote Allowed (Command Allowed Allowed Allowed Allowed
Login) Prompt)
SFTP (Secure Not Allowed Not Not Not Not
File Transfer) Allowed (Command Allowed Allowed Allowed Allowed
Prompt)
Pass- Not Allowed Allowed Not Not Not Pass-through for remote TCP clients is
through Allowed Allowed Allowed Allowed enabled using Pass Through Access in
Connection Security parameters under Configuration
(Telnet & > Systemwide and select Secure Type
TLS) under Configuration > Connection to
Telnet or TLS.
Pass-through is allowed without
Login/Password if its Pass-through
password Authentication is disabled in
MCP Config Tool (mcpcfg) or MCP Settings
GUI > Configure Authentication.
Terminal Not Allowed Allowed Allowed Not Not Terminal Server is allowed without
Server Allowed Allowed Allowed Login/Password, if its application
Connection parameter Password Authentication is
(Telnet & set to No.
TLS) Terminal Server for remote TCP clients is
enabled by selecting “Secure Type" under
Configuration > Connection to Telnet or
TLS.
Terminal Server application parameter
Minimum Privilege Level specifies if
Operator user is allowed or not.
Pass- Not Allowed Not Not Not Allowed Pass-through for remote SSH clients is
through Allowed Allowed Allowed Allowed enabled using Pass Through Access in
Connection Security parameters under Configuration
> Systemwide and select Secure Type
(SSH Secure under Configuration > Connection to SSH
Tunnel) Secure Tunnel.
Pass-through for SSH Secure Tunnel is
always allowed with Login/Password,
96 SWM0101-3.11-1 GE Information
MCP Software Configuration Guide MCP Basics
User Type
Admin User Types HMI User Types SSHP
Service Additional Security Notes
Administr Supervi Operat Observ assTh
root rough
ator sor or er
Terminal Not Allowed Not Not Not Allowed Terminal Server for remote TCP clients is
Server Allowed Allowed Allowed Allowed enabled by selecting Secure Type under
Connection Configuration > Connection to SSH
Secure Tunnel.
(SSH Secure
Tunnel) Terminal Server for SSH Secure Tunnel is
always allowed with Login/Password.
The parameter Minimum Privilege Level
for SSH Secure Tunnel is always
SSHPassThrough only.
GE Information SWM0101-3.11-1 97
Chapter 2 - Introducing MCP
Features
Substation Gateway Features
GE’s MCP Substation Gateway supports the following key features:
Security Features
The MCP supports the following security features:
• NERC compliant passwords, with strong complexity rules and one-way encryption
• Full auditing including Syslog integration to enterprise systems
• SFTP for secure network-based firmware upgrades and configuration file transfers
• SSH for secure network access to the maintenance facility
• SSH for secure programming and connection to the IEC 61131 programing facility
• Integration with LDAP/AD centralized RBAC
Advanced Gateway
The MCP collects data from substation protection, control, monitoring, RTU, and intelligent devices, pre-processes
the data and moves it up to EMS and DMS SCADA systems providing centralized substation management.
Advanced Automation
The MCP provides the computing platform necessary to automate substation procedures, such that intricate
processes are carried out safely and efficiently by creating advanced custom automation programs using IEC
61131 compliant tools and perform basic math functions on data points using the built-in calculator tool.
GE Information SWM0101-3.11-1 99
MCP Software Configuration Guide Introducing MCP Features
Fault Recording/Datalogging
Using pass-through connections, users can extract valuable non-operational data such as digital fault recording
(DFR) records, event, and oscillography files. The user can also access the historical log files and upload the
archived data for trending and analysis.
Edge Connectivity
The MCP allows built in support for the Edge Manager Connectivity for the fleet level and local device
management.
Local HMI
The MCP supports built-in Local HMI for accessing the MCP through the display port(s). The Local HMI provides
the same functions for local display and control as the remote HMI with few exceptions/additions.
To view the Help topic for the MCP HMI screen you are currently viewing, click the Help button on the Power
bar.
Popup Windows
Popup windows appear for certain functions so that you can edit information or perform an action, for example,
I/O Traffic Viewer. Most popup windows include a Help button. Click OK or the Close button on the title bar to
close the popup window.
Tree views
Many display pages present a tree view (shown below in the left pane) for finding and selecting relevant data.
The tree view lists MCP system elements in a hierarchy, typically: Devices > device type > device name > point
group > point type > point names.
Figure 3-2: Tree view
Collapse and expand parts of the list by clicking the + or - at each level. When you find what you are looking for,
click to select the item. A check appears in the checkbox next to the item to indicate it is selected. When you
select or de-select items in the tree view, the adjacent data display typically updates for the selected information.
PowerBar
The Power bar is located across the top of the main display area and contains buttons to navigate to the MCP
display pages and functions.
Figure 3-3: Typical Power Bar
• Reports
• Operator Notes
• Connections
• ARRM Status
• Point Details
• Logs
• History Events
• SOE
• Active Alarms
• File Explorer
• Settings
• User
• Help
The MCP HMI Power Bar buttons can NOT be customized. If navigation across multiple screens is required within
One-line Diagrams, the required screen navigation buttons must be custom-configured within the One-line
diagrams workspace.
To go to a specific display, click the Power bar button.
A tooltip indicates the function of the Power bar button when you hover over the button with the pointer.
If MCP redundancy is enabled, the Power Bar in Local HMI will display an indication to reflect the current
redundancy state of the MCP.
Not supported in G100.
If Standby HMI redirects to Active MCP feature is enabled, the Power Bar in Local HMI will display an indication to
reflect the HMI pointing to self or PEER MCP. For details see the Local HMI section of the G500 Instruction Manual
(GE part number 994-0152) or G100 Instruction Manual (GE part number 994-0155).
User Screens
The User Defined Screens (also referred to as the Single Line Diagram - SLD) Viewer displays:
• The main drawing (main.dra) by default.
• Simplified schematic diagrams during runtime that represent the interconnections in a substation,
including devices and the real-time values and/or state of selected ports and points.
These custom-built diagrams are built using the following two types of objects from the MCP HMI library:
• Static objects that do not change during runtime. Examples of static objects are buttons, labels, lines
and other shapes used to lay out the drawing.
• Dynamic objects that represent a data source and are updated continually as new information becomes
available. Examples of dynamic objects are circuit breakers, switches and value boxes. The source of
the data can be the real-time database, the Active Alarms (Digital Event Manager) application or other
MCP resources.
The User Defined Screens are designed and configured using the One-Line Designer.
The following related action can be performed: Issue a Command.
Trends
The Trending also known as Data Logger application allows you to graphically monitor and record data from
devices connected to the MCP. You can also save and review historical reports created by the application.
Reports
The Reports screen also known as Analog Report View allows you to view online and offline analog reports.
Periodic logging of the analog parameter information is required for records, periodic maintenance and
preventive maintenance of the substation equipment. The Analog Report application allows you to record the
Analog Data of various devices connected to the MCP. It allows you to configure the MCP to capture the
configured Analog Input values with Quality Attributes at regular intervals of time and format.
The Analog Report application allows you to choose existing record templates or create and import new
templates to log reports. It also allows you to back up the generated reports. The reports can be stored in html,
pdf, or xls format.
Operator Notes
The Operator Notes page lists operator notes that have been entered by users and stored in the MCP database.
Note records
Each note record displays the following information:
Table 3-1: Note Records
Button Description
Note Number Automatically assigned number to identify the note.
Sequence Number Sequence Number to identify the original note or comments added to the note.
Sequence Number 0 indicates the original note and greater than 0 indicates the
comment(s) added to the original note.
Operator Name MCP HMI username of the note author (original or commented).
Date Created Date and time that the note or comment was created.
Notes Free-form text entered by the note author.
Connections
The connections also known as Communications Summary page lists the most recent communication statistics
between the MCP and configured device or master station connections.
The following related actions can be performed:
View Device Communications
View Master Station Communications
View Pseudo points – Detailed Communication Statistics
ARRM Status
The Automated Record Retrieval Manager retrieves and stores record files from devices connected to your MCP.
The ARRM Viewer can be used to view the status of this application and to initiate manual transfers. You can also
retrieve downloaded records from the MCP using any FTP/SCP/SFTP client as needed or on a scheduled basis.
You can also configure the MCP to automatically download files to a remote location using the Sync Manager
utility. For more information refer to the MCP Instruction Manual Configure Sync Manager section or to the MCP
Online Help >Configure Sync Manager topic.
Point Details
The Point Details also known as Point Summary page lists system elements (and identifying information) for
which points have been configured, categorized by:
• IED Point Summary
• Master Station Point Summary
• Application Point Summary
• Point Groups Summary
The following related actions can be performed:
• View I/O (IED and Master Station only)
• View Point Details
Logs
The Logs also known as System logs page provides a report utility to display a list of system activities maintained
by the MCP and stored in the real-time database. The logs are useful for troubleshooting and tracking purposes.
The following reports are available:
• Control Log
• Diagnostic Log
• System Event Log
• User Activity Log
• Analog Report Log
• VPN Server Log (Available only to Administrator class/role users)
SYSLOG-based event logging (i.e., System Event Log, Diagnostic Log, Control Log and
User Activity Log) should not be used for real time and Mission Critical purposes. Data
presented in the SYSLOG may not be updated in real time to correctly indicate the
status of monitored and controlled equipment.
For example, a power line could be listed as inactive in a system log, while in fact the
power line is active and its status in the system log may be updated significantly later
in terms of real time applications.
Only use SYSLOG-based event logging for system management, security auditing,
general informational and debugging messages.
History Events
A historical alarm is an alarm that has been archived from the Active Alarms list. The History Events also known
as Historical Alarms page provides a search utility to filter, sort and display historical alarm records stored in
the real-time database.
To be archived to the Historical Alarms page, an alarm must meet the following conditions:
• "Deviation" alarm is acknowledged and has returned to normal state
• "On update" alarm is acknowledged
"Double Point" alarm is acknowledged and the pair of source points have moved into a non-alarmable state
SOE
The SOE page provides a search utility to filter, sort and display Sequence of Event (SOE) items stored in the MCP.
Active Alarms
The Active Alarms page lists all active alarm events on every alarm-enabled point in the MCP database. The
display automatically updates whenever the MCP generates a new alarm, or when the status of an existing alarm
changes. The total number of active alarms in the system database is shown in the bottom left corner of the
window.
The Active Alarms button on the Power bar visually indicates the status of active alarms in the MCP:
The Alarm application must be configured to view the Active Alarms button and page. The icons shown
above are system defaults and can be modified on the Alarms tab of the Configuration tool.
The MCP does not raise alarms on points that are offline.
File Explorer
With a USB key connected to one of the MCP USB ports you can:
• Browse files and folders in the user folder and datalog folder according to:
o File name with modified date and file size
o Folder name with modified date
• Copy selected files from the user folder and the datalog folder to the USB key.
Do not back up your user folder using the Copy function, since some sensitive
files are hidden and cannot be copied due to security reasons; for example, User
Certificates, MCP Password and Shadow files etc.
File Explorer Viewer is only available in the Local HMI mode.
The USB must be formatted with FAT32 and must have a partition table.
» To select a file or multiple files under the user folder or under the datalog folder:
• For a single file, left click the file.
• For multiple files, left-click the first file and [Ctrl]+left-click the additional files.
» To copy selected file(s) to the USB key:
1. Select a file or multiple files.
2. Right-click the file(s).
Result: A popup menu appears.
3. Select Copy to USB Key command.
Result: A Save To dialog window appears.
4. Navigate to the destination.
5. Click Save.
» To unmount the USB key:
• Click the Unmount USB button below the file tree.
Settings
The Settings page has Access and Utilities to provides access to software tools installed on your MCP device.
Access
All available options under Access page are listed along with a description of the functionality they provide.
User Management
The User Management Tab on the Access page allows the user to set up accounts for MCP users, including
usernames, passwords and access level.
Add a User
» To add a user:
1. Click Add to create a new user account.
Result: The Add User window appears.
2. Enter the user information.
3. Click OK.
Result: The User Management table is saved.
Change a User Account
» To change a user account:
1. Click on the user record from the list in the User Management table. Result: The Update User
window appears.
2. Change the user information as required.
3. Click OK. Result: The User Management table is saved.
Delete a User
» To delete a user:
1. Click on a user record from the list in the User Management table. Result: The Update User
window appears.
2. Click Delete. Result: The Delete confirmation popup appears.
3. Click Yes to confirm the deletion.
Configure User Home Page
» To configure the User Homepage:
1. Click on the user record from the list in the User Management table.
Result: The Update User window appears.
2. Update the user information as required.
3. Select the user Home Page from the dropdown list.
4. Click OK.
Result: The User Management table is saved.
Authentication
The Authentication tab on the Access page allows the user to configure either:
Local Mode : Local authentication makes use of files stored locally to control user authentication, as
opposed to connecting to a remote server to obtain username and password
information.
Remote Mode : Remote authentication makes use of user account information stored on remote server.
The MCP supports three remote authentication modes:
• Cisco® TACACS+
• LDAP
Automatic Login
The Automatic Login on the Access page allows the user to setup Local and Remote HMI auto login accounts.
Local UI Automatic : Select to skip the Local HMI log in when a user logs into the MCP through the local
Login substation computer setup and go directly to the Local HMI main page (home
page). Default is False.
SECURITY NOTICE: If Local UI Auto Login is set to true, the Local HMI will perform
an automatic login using the selected user privilege level and name, without
additional human authentication required. It is up to the system’s Engineer /
Operations to assess the effect and application of this behavior at runtime.
Local UI Automatic : This parameter can only be configured if “Local UI Automatic Login” is set to true.
Login Wait Time The Local UI Automatic Login Wait Time parameter represents the wait time (in
seconds) that is available for the user to interrupt the system from entering the
Local Graphical UI’s Main Page from the Command Line Interface.
Local Automatic Login : This parameter can only be configured if the Local UI Automatic Login parameter
Privilege Level is set to true. The Local Automatic Login Privilege Level parameter provides the user
with the option to configure the Default Privilege Level when navigating to the Local
Graphical UI.
Local Automatic Login : This parameter can only be configured if the Local UI Automatic Login parameter
User is set to true. The Local Automatic Login User parameter allows the user to choose
the default user from the list of users configured under each Privilege Level
(Operator/Observer).
Remote UI Automatic : Select to skip the Remote HMI log in when a user logs into the MCP through the
Login Remote substation computer and go directly to the Remote HMI main page (home
page). Default is False.
SECURITY NOTICE: If Remote UI Auto Login is set to true, the Remote HMI will
perform an automatic login using the selected user privilege level and name,
without additional human authentication required. It is up to the system’s Engineer
/ Operations to assess the effect and application of this behavior at runtime.
Remote UI Automatic This parameter can only be configured if “Remote UI Automatic Login” is set to true.
Login Wait Time
: The Remote UI Automatic Login Wait Time parameter represents the wait time (in
seconds) that is available for the user to interrupt the system from entering the
Remote UI’s Main Page from the Command Line Interface.
Remote Automatic : This parameter can only be configured if the Remote UI Automatic Login parameter
Login Privilege Level is set to true.
The Remote Automatic Login Privilege Level parameter provides the user with the
option to configure the Default Privilege Level when navigating to the Remote
Graphical UI.
Remote Automatic : This parameter can only be configured if the Remote UI Automatic Login parameter
Login User is set to true.
The Remote Automatic Login User parameter allows the user to choose the default
user from the list of users configured under each Privilege Level
(Operator/Observer).
VPN Client
The VPN Client on the Access page allows the User to create VPN Client settings including Routing and White
list options.
Utilities
All available utilities are listed along with a description of the functionality they provide. The following related
actions can be performed:
Utilities Log In : This Utility is used for an SSH (Secure Shell) terminal session to the MCP. This option
is available from local HMI and Remote HMI. This option is only available to
Administrator-level users.
To login to SSH Shell user must have Administrator access and your username and
password.
Certificate Import : This utility allows to import certificates and Certificate Revocation Lists (CRLs) from
an externally mounted filesystem or the local import directories. This option is
available only from local HMI and for Administrator-level users. For more details
refer to Appendix G – Security Certificates Creation for MCP.
Certificate : This utility allows to manage Local Certificates, Issuer Certificates, and Certificate
Management Revocation Lists. Available only from local HMI and for Administrator-level users.
For more details refer to Appendix G – Security Certificates Creation for MCP.
Export Trending/SOE : This utility allows to Export/Backup Local Database. This option is available from
Database local HMI and Remote HMI. This option is available to all user levels except
Observer-level users.
Generate Gateway : Generate Public/Private key pairs in the MCP for the SSH terminal session. This
Key Pair option is available from local HMI and Remote HMI. This option is available to all
user levels except Observer-level users.
This MCP HMI utility provides an option to:
• Save the generated Public key to the host computer
• Delete the existing keys.
Exporting VPN Client Export VPN Client Configuration File into a PC/Shared Location/USB. The VPN Client
Configuration File File is used to configure the VPN Client to establish VPN Connection. This option is
: available only from local HMI and for Administrator-level users.
Upload SSL Server : This MCP HMI utility provides an option to:
Certificate / Server • Upload P12 file (PKCS#12) with SSL Server Certificate and Server Key to the
Key device.
This utility allows to enable secured communication between HMI client and MCP
device.
This option is available only from local HMI and for Administrator-level users.
The following table lists the available access to different features across the different HMI tools.
Table 3-5: Access to various features of HMI Tools
Online Config Local Runtime Viewer Remote Runtime Viewer
SSH Terminal Enabled for admin Enabled for admin NA
Certificate Import Enabled for admin Enabled for admin NA
Certificate Enabled for admin Enabled for admin NA
Management
Export Database () NA Enabled for operator, supervisor Enabled for operator,
and admin supervisor and admin
Generate Gateway Enabled for Generate Key Pair - Enabled for Save Public Key – Enabled for
Key Pair supervisor and supervisor and admin Operator, supervisor and
admin admin
Save Public Key – Enabled for
Operator, supervisor and admin
Delete Keys - Enabled for
supervisor and admin
Export VPN Client Enabled for admin Enabled for admin NA
user only
Upload SSL Server Enabled for admin Enabled for admin NA
Certificate/Key user only
User
This User setting provide options to configure the appearance of the windows.
Look & Feel - This option allows MCP user to change the look & feel of the windows launched. MCP HMI
support multiple themes. Default is GADX.
Themes supported:
1. GADX (Default)
2. Acryl
3. Noire
MCP saves the last configured theme and re-opens the windows with the same theme after
re-login.
Window - This option allows to configure the mode in which the main windows and sub windows
launch. Default is Docked.
Modes supported:
1. Docked: In this mode, all windows when launched, attach to the main window.
2. Floating: In this mode, all windows when launched, open as an independent
window.
3. Single: In this mode, all windows when launched, open as an independent window.
Whenever any window is opened, its position is persisted so that after re-login, MCP opens
all the last opened windows in the same state at the same position.
In addition to mode configuration, it also provides option to launch Debugging window for
troubleshooting.
This option also has an option to reset the persistency of current user or all users.
If user selects the option to reset the persistency of current user, then all the persistency
related information of the HMI user that applied this setting will be cleared.
And, if user selects the option to rest the persistency of all users then all the persistency
related information of all the HMI users will be cleared.
Only supervisor and administrator can reset all users, individual operators and observers
can only reset his own persistency files.
Logout - When you are finished working with the MCP HMI, you should log out to secure the system.
Logging out terminates your user session with the MCP and closes all MCP HMI displays and
windows.
» To exit from the MCP HMI:
• Click the Logout button on the Power bar.
The MCP HMI closes, and the MCP Login screen appears.
Help
When you click the Help -> Content button on the Power bar, the MCP Substation Gateway Online Help opens
and displays the topic associated with the MCP page you are currently viewing. The MCP online Help guides you
through the displays and functionality of the MCP HMI. The online Help is supplied by the MCP Web server and is
not stored on your PC.
There are a few different ways to find information within the MCP Online Help system.
» To find a topic in Help, use one of the following navigation tools:
• Click the Contents button to browse through topics by category.
• Click the Search tab to search for specific words or phrases contained in Help topics - enter text and
select topics from the displayed list.
• Click the Index tab to see a list of keywords - either type the word you're looking for or scroll through the
list.
» To view Help topics, use one or more of the following techniques:
• On the MCP HMI page you are currently viewing, click the Help button on the Power bar to view
the Help topic associated with that page.
• In the Help window, use the Contents, Search and Index buttons to find specific topics.
• In a Help topic, click underlined links to jump to the associated topic.
» To print a Help topic
1. Right-click while hovering anywhere on the MCP HMI Online Help window.
2. Select the Print command
Sort Records
Sorting changes the order in which data appears on the screen.
On many display pages, you can change the order in which records appear by choosing a different field to sort
by and by choosing to sort records in ascending or descending order.
On most MCP HMI displays, you can change how information appears on the screen.
» To change the sort order of records:
1. Click a field column heading: for example, Active Alarms page > Alarm Date column heading.
Result: The records are sorted according to that column heading and an arrow appears in the heading
to indicate that the records are sorted in ascending order.
2. Click the field column heading again to change the order from ascending to descending .
The records are sorted either:
• Chronologically for date/time information, or
• Alphanumerically for all other data types
Result: The records appear in the new sort order.
When you sort data, only the display on your screen changes, the data is not refreshed from the system
database.
Tip: Many pages support customization of columns. Right-click the column heading to add or remove
columns from the data grid. You can also drag-and-drop column headings to re-order them horizontally.
Filter Events
Filtering presents all, or a subset of available data from the database.
On some displays, you can filter data by selecting the desired criteria for the records to be retrieved from the
database. The following pages can be configured to display different sets of data:
• Active Alarms (configured)
• Historical Alarms (user selectable)
• SOE List (user selectable)
• System Event Log (user selectable)
• Point Details (configured)
Configured filtering is preset in the DS Agile MCP Studio Configuration tool. User-selectable filtering is set by the
user on the HMI Runtime screens.
Internationalization
The MCP HMI is:
• Internationalized to adapt to different languages and regional settings.
• Ready to be localized to reflect regional languages, number formats, and date/time formats.
Externalization
The text and labels in the MCP HMI are externalized to resource bundle files so that they may be localized without
the involvement of an engineering team.
The following items are not internationalized:
• MCP Configuration Command-line utilities.
• Any text or data coming from external devices (for example, auto-discovered names from a SEL relay).
• File Names, Login Screens, Usernames and passwords.
• All graphics and icons.
• GE corporate identities, logos and indicia.
Localization
Localization is the process of adapting an internationalized HMI for a specific region or language by
adding locale-specific components and translating text.
For the MCP HMI, localization involves:
1. Translating resource bundle files into specific language.
2. Installing resource bundle files to MCP.
3. Configuring Locale settings.
Localization for a region should be performed by personnel trained in localization for that region. Please contact
GE Grid Solutions Technical Support for procedure to create and install resource bundle files to the MCP.
Local Settings
The following local settings can be configured in the MCP HMI:
• HMI language
• Number format
• Data/time formats
• Decimal separator
• Grouping separator
» To reconfigure the local settings:
1. Access the MCP HMI.
2. Click the Configuration Power bar button.
3. Click the Systemwide tab.
4. In the left pane, click System > Security and change the security settings, if desired.
(*) Data for these locales are derived from the Unicode Consortium's Common Locale Data Repository release
1.4.1 on an "AS-IS" basis.
(**) Data for these locales are derived from the Unicode Consortium's Common Locale Data Repository release
1.9 on an "AS-IS" basis.
Manage Alarms
This chapter contains the following sections and sub-sections:
Digital Event Management
Alarm Types
Alarm Groups
Double Point Alarms
Active Alarms
View Active Alarms
Acknowledge an Alarm
Enable or Mute an Audible Alarm
Enable or Mute an Alarm Buzzer
Historical Alarms
View Historical
Upon detecting an alarm condition on a source point or a group of points, the MCP creates a record in the
database and presents the alarm to the operator on the MCP Active Alarms page for further action. Once an
alarm is acknowledged it is archived by moving it from the Active Alarms page to the Historical Alarms page.
You can:
• View Active Alarms
• Acknowledge an Alarm
• Configure Alarms, including double-point alarms, alarm points and alarm settings
Alarm Types
The following alarms types are configurable:
Deviation Alarms (2-state) : Generates an active alarm when the point state changes from normal to
alarmable and archives the alarm only when the point state returns to
normal and the alarm is acknowledged.
On Update Alarms (2-state) : Generates an active alarm when the alarm state changes from one state
to another and archives the alarm when the alarm is acknowledged. In
effect, two alarms are created: the first alarm is generated when the
source point changes from ON to OFF, and a second alarm is generated
when the source point changes from OFF to ON.
Double Point Alarms (4-state) : Two alarm types are generated – an OnUpdate Alarm and a Deviation
Alarm.
You can only select pre-configured double points for this type of alarm.
• An On Update Alarm is generated when the double point is in the transit state (both points = 0) or
in the invalid state (both points = 1) and the state persists longer than the configured invalid period
of time. The On Update alarm is archived when it is acknowledged.
• A Deviation Alarm is generated when the double point is in the open state (open point = 1, close
point = 0) and is put in the reset state when the double point returns to the close state (open point
= 0, close point = 1). The Deviation alarm is archived when the alarm state is reset, and it is
acknowledged.
The Digital Event Manager does not support the “,” (comma) character in the Point, Point State, Alarm and
Alarm State field descriptions. If the user has used commas in these field descriptions during
configuration, the commas are automatically replaced with spaces during runtime processing.
The MCP does not raise alarms on points that are offline.
Alarm Groups
Digital Event Management supports alarm groups named Group1, Group2, Group3, and so on, plus a System
alarm group. Based on your alarm group settings, individual alarms within an alarm group are displayed with
the configured foreground color, background color, blinking rate and sound for the current alarm state.
You can think of an alarm group as a summary - if a given alarm group is in the normal state, then all alarms
belonging to the group are normal. Alarm group indications are further grouped into a System alarm to indicate
if any input point in the group is in an alarm condition.
Active Alarms
The Active Alarms page lists all active alarm events on every alarm-enabled point in the MCP database. The
display automatically updates whenever the MCP generates a new alarm, or when the status of an existing alarm
changes. The total number of active alarms in the system database is shown in the bottom left corner of the
window.
The Active Alarms button on the Power bar visually indicates the status of active alarms in the MCP:
The MCP does not raise alarms on points that are offline.
Alarm records
The following details are available for each alarm record.
Table 3-8: Alarm Records
Setting Description
Acknowledged Date Date and time (to millisecond) when the alarm was acknowledged.
Acknowledge (Button) – Click to manually acknowledge the alarm
Active Alarms Only
Acknowledged A checkmark appears if the active alarm has already been acknowledged
(Acknowledge Indicator) (manually or automatically).
State Description Describes the point state when the associated alarm value is in the Alarm
state. Typically, the point is in the:
• ON if the alarm value is in alarm the state and
• OFF if the alarm value is in the Normal state.
• In case of Double Point Alarms, the alarm state description can be one of the
below:
• Open
• Close
• In transit
• Invalid
Alarm Date Date and time (to millisecond) when the alarm was created.
Alarm ID (Alarm Identifier) A unique ID of an alarm.
Reference Describes the alarm point. It defaults to the name of the alarm point.
Type Indicates the type of alarm: "On Update" or "Absolute".
Value Indicates the alarm state: 0, typically the Normal state or 1, typically the Alarm
state.
In case of Double Point Alarms, the alarm state value indicates one of the below:
• State 2 = Open
• State 3 = Close
• State 4 = In transit
• State 5 = Invalid
Device ID Identifies the device associated with this alarm point.
Groups (Active Alarms Only) Alarm group to which the point’s alarm is associated.
Line ID Identifies the electrical transmission line associated with the device of this alarm
point.
Originator The source of the control command. See Originators for more information.
Reset Date Date and time (to millisecond) when the alarm was reset.
Reset (Reset Indicator) When a checkmark is displayed, it indicates that alarm has returned to Normal
state.
Sequence ID Sequence ID of the alarm record.
Archived (Historical Alarms When a checkmark is displayed, it indicates that alarm has been archived.
Only)
Archived Date (Historical Date and time (to millisecond) when the alarm was archived.
Alarms Only)
Username Identifies the Username that acknowledged the alarm
Description Describes the alarm point. It defaults to the source point.
Home Directory Home directory of the source producer / application
Bay ID Bay ID description of the Home directory
Setting Description
Device Type Device Type of the Home directory
The fields which appear on the Active Alarms page are configurable.
The fields which appear on the Historical Alarms page are user selectable.
NOTES:
• Critical Alarms are shown in a separate tab in the lower half of the window. All other alarm groups can
be accessed by clicking the tabs in the top half of the window.
• If one or more digital input points have the force, alarm inhibit, or scan inhibit quality flags set, a message
saying "Alarms have been suppressed" is shown at the bottom of the screen.
• The MCP does not raise alarms on points that are offline.
• Active Alarm Viewer retains the last saved sorting criteria/filters for the fields when navigating away and
back.
» To view alarms:
1. Click the Active Alarms button on the Power bar.
2. Select a Group tab or All Alarms (includes System alarms) tab to view the current active alarms. You can
filter by Line ID, Device ID, and/or Bay ID.
Each tab lists active alarm records generated by the MCP. Alarms that need to be acknowledged are visually
indicated by color and flashing as configured in the alarm settings.
Tip: Right-click any column heading to customize the columns shown. You can also drag-and-drop column
headings to re-order them horizontally.
» To create an alarm group tab:
1. Click the Add Alarm Group button.
Result: A popup window appears.
2. Select the desired alarm group.
3. Click OK.
» To delete an alarm group tab:
• Click the red x on the right side of the tab.
Acknowledge an Alarm
Alarms are acknowledged on the Active Alarms page. You can manually acknowledge an individual alarm,
selected alarms or a group of alarms. "On Update" alarms are acknowledged automatically only if the Ack
Method is set to Automatic.
» To acknowledge an alarm:
1. Select one or more alarms on the Active Alarms page.
2. Click Acknowledge Alarm(s).
» To acknowledge all alarms in an alarm group:
• On an alarm group tab on the Active Alarms page, click Acknowledge Group.
Historical Events
A historical event is an alarm that has been archived from the Active Alarms list. The Historical Events page
provides a search utility to filter, sort and display historical alarm records stored in the real-time database.
To be archived to the Historical Events page, an alarm must meet the following conditions:
• "Deviation" alarm is acknowledged and has returned to normal state
• "On update" alarm is acknowledged
• "Double Point" alarm is acknowledged and the pair of source points have moved into a non-alarmable
state
View Data
This chapter contains the following sections and sub-sections:
View Data
Real-Time Database
Data types
Data Quality Status
Point Summary
View Point Details
View Events
Connections
Logs
Trends
View Data
User can view:
• Events
• Active Alarms
• Historical Alarms
• Point Details
• Communications Traffic
• System Logs
• Analog Report
Real-Time Database
The MCP communicates with devices connected to the electric power network. These devices monitor and record
several types of information, which can be generally classified as:
• Present values (PVal) that reflect the state of the power system at an instance in time.
• Peak demand values that reflect the minimum and maximum power flow conditions encountered.
• Demand values.
• Disturbance or fault records - time-stamped record of a disturbance, fault or other similar event within
the power system, considered to be a serious alarm condition.
The real-time database (RTDB) is a core component of the MCP. It resides within the MCP and acts as a central
container for all data that is collected and may need to be exchanged between MCP applications. The real-time
database stores the value of all input/output data collected by the MCP in the form of point data, as well as the
occurrence of events that take place (for example, disturbance or fault records). The MCP can manipulate the
data from devices to produce additional local/pseudo data points. The real-time database is commonly referred
to as the system point database.
The following general types of information are stored:
• Point data and values
• Analog set point status
• Digital control status
• Tagging/Inhibit status
• Force value status
• Statistics
Data is organized and presented to the User in the following formats:
Table 3-9: Data Formats
Format Description
Record Single set of data pieces, for example, an alarm record or SOE record.
Field Single piece of information or data that is of the same type across all records, for example,
Device ID.
Sort key Field information that is used to select the type of information to display from the database.
Filter criteria Specific parameters used to isolate and select appropriate records from the database.
Data Types
The real-time database (RTDB) stores the following data types:
Table 3-10: Data Types
Format Abbreviation Data Type Description
Digital Input DI (BI) One-bit Typically represents the On/Off state of a physical
(also Binary Integer device. May also indicate any single bit value that is
Input) derived from other data or used to indicate that a
condition exists or that a process is in a state. If not
representing the state of a physical device, it is referred
to as a pseudo point.
Digital DO (BO) One-bit Used as a means to control the On/Off state of a
Output (also Integer physical device, or in the case of a pseudo output, to
Binary initiate the function or operation associated with the
Output) output.
Analog Input AI 64 bits Real Typically represents the value of a physical device that
is capable of sensing and reporting a range of discrete
values. May also be used as a pseudo point to represent
the output of a process or any other derived value that
cannot be represented as a single bit.
Analog AO 64 bits Real Used to control the value provided to an external device
Output or process.
Accumulator ACC 64 bits Typically represents the accumulated value of a
Integer counting operation. This count could be the number of
times a digital input changed state, or the amount of
energy carried by a conductor over a certain period.
May also be used as a pseudo point to represent the
number of times an operation took place or how often
a function was executed.
Text TXT 132 bytes Typically used to represent the description of an event
Character such as a protective fault report.
255 bytes
characters
only for
61850
Client
applications
Quality status
The current quality status is presented for each point and object and indicates the general nature of the data
stored for the point. Quality status can be one of:
Normal - The data is considered correct and there are no actions or exceptions marked on the
point
Invalid - The data is not accurate or up-to-date due to the status of the device
Questionable - The data is likely to be inaccurate or out-of-date due to the status of the device
The foreground and background colors for Point Value and Quality Status (based on configured display settings)
change to alert the user regarding the current quality state. The default color settings to indicate quality status
are:
Table 3-11: Quality Status
Quality Status Foreground Color Background Color (default)
Normal Black Green
Invalid Pink Grey
Questionable Black Grey
Zombie Maroon Grey
Engaged Quality Black Spring green
Quality Attributes
The MCP provides the following quality attributes for each point:
Table 3-12: Quality Attributes
Indicator Bit Quality Quality Available in Description
Attribute Attribute One Line
(legacy) (61850) Diagram
(OLD)
symbols
O 0 Offline Failure Offline indicates that the MCP is not
communicating with the device
R~ 1 Restart Device restart
CX 2 Comm Lost The MCP is unable to communicate with
the device or application reporting the
point.
R 3 Remote Substituted Yes The device is reporting that the point has
force been forced to a static value remotely.
The point is no longer being updated
with actual data.
CK 4 Reference Bad Reference Check indicates that the
Check Reference device is reporting that one or more of
the references used to determine the
value of the field point are outside
allowable tolerances
In some places, quality attributes (flags) are presented as a numeric value instead of a list of discrete flags.
Each discrete flag is represented as a bit encoded value.
To determine which quality flags are set you need to convert the decimal numeric value to binary and, starting
from the right side, first bit is Bit 0, then immediately followed to the left by Bit 1, etc.
Please note that, depending on the tool you use to convert to binary - the leading zero bits (i.e. most left ones
which are only 0) may not be shown.
Using for example the Calculator application within Windows 10, set to Programmer mode:
1. Make sure you are in Decimal mode (click on DEC).
2. Enter the decimal value.
3. Look at the BIN field value, it shows the binary bit encoded representation.
4. In this calculator application you may also click on the binary toggle button (4), and see a detailed bit wise
representation, as following:
In the above example, the set (=1) bits are 6, 9, and 18.
• Old Data
• Questionable
• Scan inhibited
» To view data quality:
The User can view quality information for individual data points and objects from the following pages and
screens:
• Point Details
• One-Line Viewer
Point Details
The Point Details page lists system elements (and identifying information) for which points have been configured,
categorized by:
• IED
• Master Station
• Application
• Point Groups
The following related actions can be performed:
ACTIVE MCP – The source of the data comes from the IED to the ACTIVE MCP only and
source of data is ACTIVE MCP both in Active and Standby MCP devices.
ACTIVE MCP HH – The source of the data comes from the IED to the Active MCP, and source
of data is ACTIVE MCP HH in Active MCP
STANDBY MCP HH – The source of the data comes from the IED to the Standby MCP and the
source is STANDBY MCP HH in Standby MCP.
The user can display the recorded sequence of event (SOE) and protective relay fault (PRF) events for a selected
device.
» To view SOE/PRF events:
• Click the SOE/PRF button for a selected device on the IED Point Summary page.
Result: The SOE/PRF List window opens showing the stored SOE and PRF event records for the selected
device.
SOE List
Table 3-14: SOE List
Event Record Description
Event Date Time Date and time (to millisecond) when the event was created.
Point Description Description of the point in the map file.
State Value of the state (1 = ON, 0 = OFF)
State Descriptor Description of the state.
PRF List
Table 3-15: PRF List
Event Record Description
Event Date Time Date and time (to millisecond) when the event was created.
Fault Distance Description of the point in the map file.
Trip Description Description of the state.
ACTIVE MCP – Only Active Slave communicates to the Master whereas Standby Slave will not
communicate to the Master. This value is ACTIVE MCP both in Active and Standby MCP
devices if the Slave does not support Hot-Hot mode.
ACTIVE MCP HH – Active Slave communicates to the Master in the case Slave supports Hot-
Hot mode.
Standby MCP HH – Standby Slave communicates to the Master in the case Slave supports
Hot-Hot mode.
Maintenance Mode
A checkbox at the top of the point details window allows you to toggle Maintenance Mode on and off. This allows
the user to view actual point details on system points that are affected by system features like input point
suppression and redundant I/O. Enabling maintenance mode adds the Last Reported Value, Last Reported
Quality, and Last Reported Time fields to the data grid.
The following related actions can be performed:
Sort records
Issue a command
Point Details
The Point Details page lists all configured points and real-time point values in the real-time database. The Point
Details page displays one tabbed pane per point type:
• Accumulator
• Analog Input
• Analog Output
• Digital Input
• Digital Output
• Text
• All Points
• Pseudo Points
Point values update at a configured interval to display the most current values.
Tips
• If more than 20 points exist for the selected type, the point display is broken up across multiple pages.
20 points are shown per page with page numbers and navigation buttons shown at the bottom of the
window.
• Pseudo points and values are available from the IED/Master Station Communications Summary
pages.
The following related actions can be performed:
View point details
Issue a command
Accumulator tab
Accumulators typically represent the accumulated value of a counting operation. This count could be the number
of times a digital input changed state, or the amount of energy carried by a conductor over a certain period. May
also be used as a pseudo point to represent the number of times an operation took place or how often a function
was executed.
The following point information is provided for each accumulator point on the Point Details page:
• Point ID
• Point reference
• Point description
• Running value - current value
• Quality attributes
• Updated time
• Frozen value
• Freeze date and time
• Clear date and time
The quality status of Running value and Quality Attributes are visually indicated according to configured color
settings for Invalid, Questionable or Normal.
Point values update at a configured interval to display the most current values.
If more than 30 points exist for the selected type, the point display is broken up across multiple pages.
Use the navigation buttons shown at the bottom of the window to move through the points list.
• Point reference
• Point description
• Point value - scaled value
• Quality Attributes
• Updated time
The quality status of Point value and Quality attributes are visually indicated according to configured color
settings for Invalid, Questionable or Normal.
Point values update at a configured interval to display the most current values.
If more than 30 points exist for the selected type, the point display is broken up across multiple pages.
Use the navigation buttons shown at the bottom of the window to move through the points list.
The following related actions can be performed:
View point details
Issue a command
If more than 30 points exist for the selected type, the point display is broken up across multiple pages.
Use the navigation buttons shown at the bottom of the window to move through the points list.
The following related actions can be performed:
View point details
Issue a command
If more than 30 points exist for the selected type, the point display is broken up across multiple pages.
Use the navigation buttons shown at the bottom of the window to move through the points list.
The following related actions can be performed:
View point details
Issue a command
If more than 30 points exist for the selected type, the point display is broken up across multiple pages. Use
the navigation buttons shown at the bottom of the window to move through the points list.
The following related actions can be performed:
View point details
Issue a command
• Point ID
• Point reference
• Point description
• Point value - current present value
• Quality Attributes
• Updated time
• State description
The quality status of Point value and Quality attributes are visually indicated according to configured color
settings for Invalid, Questionable or Normal.
Point values update at a configured interval to display the most current values.
If more than 30 points exist for the selected type, the point display is broken up across multiple pages.
Use the navigation buttons shown at the bottom of the window to move through the points list.
The following related actions can be performed:
View point details
Issue a command
Text tab
Text points are typically used to represent the description of an event such as a protective fault report. They may
also be used as a pseudo point to represent the output of a process or any other derived value that cannot be
represented as a single bit or analog value.
The following point information is provided for each text point on the Point Details page:
• Current Value
• Last Reported Value
• Current Quality Flags
• Last Reported Quality Flags
• Last Reported Timestamp
• Tag Description
• Point Description
The quality status of Point value and Quality attributes are visually indicated according to configured color
settings for Invalid, Questionable or Normal.
Point values update at a configured interval to display the most current values.
If more than 30 points exist for the selected type, the point display is broken up across multiple pages.
Use the navigation buttons shown at the bottom of the window to move through the points list.
The following related actions can be performed:
View point details
Issue a Command
View Events
The SOE/PRF page provides a search utility to filter, sort and display sequence of events (SOEs) and protective
relay faults (PRFs) records stored in the MCP.
» To view events:
1. Click the SOE/PRF button on the Power bar. A new window opens.
2. Select the SOE tab for sequence of events records. Select the PRF tab for protective relay fault records.
3. The records are shown in the data table. You can filter by Line ID, Device ID, and/or Bay ID, and you can
choose the number of records to show on each page.
4. User can save the records in CSV format by clicking the Export Data button. This exports all available
data, even across multiple pages. Records that are filtered out are not included.
Right-click any column heading to customize the columns shown. You can also drag-and-drop column
headings to re-order them horizontally.
Event Records
The following details are available for each event record (depending on the record type):
Table 3-18: Event Records
Event Type
Field Description
SOE PRF
Record ID ✓ A unique number to identify the event record.
Event ID ✓
Event Type
Field Description
SOE PRF
Originator ✓ The source of the control command. See Originators for more
information.
Quality ✓ The quality flag associated with the record.
State Description ✓ Text description of the state (ON = 1, OFF = 0)
Home Directory ✓ ✓ System location of the device/application.
Line ID ✓ ✓ Electrical transmission line associated with the device of this
event.
Device ID ✓ ✓ Device associated with this event.
Bay ID ✓ ✓ Name of the bay associated with this event.
Device Type ✓ ✓ Name of the client map file used with the specific device.
Connections
Communications Summary
The Communications Summary page lists the most recent communication statistics between the MCP and
configured device or master station connections.
The following related actions can be performed:
View device communications
View master station communications
View pseudo points (detailed communication statistics
Enable/Disable Device Communications
ACTIVE MCP – The source of the data comes from the IED to the ACTIVE MCP
only and source of data is ACTIVE MCP both in Active and Standby MCP devices.
ACTIVE MCP HH – The source of the data comes from the IED to the Active MCP,
and source of data is ACTIVE MCP HH in Active MCP.
STANDBY MCP HH – The source of the data comes from the IED to the Standby
MCP and the source is STANDBY MCP HH in Standby MCP.
Field Description
Percentage efficiency Communications efficiency of the data link calculated from {1 - (Total
Transaction Failures / Total Transactions)} x 100%
Total Transactions and Total Transaction Failures information is
refreshed each second.
Mode This option indicates the mode of operation of Slave while communicating
with the Master Station. This option is available only if the system level
redundancy is Hot-Hot.
This option is available if the system level redundancy is Hot-Hot. This can
have 3 enumerated values.
ACTIVE MCP – Only Active Slave communicates to the Master whereas
Standby Slave will not communicate to the Master. This value is ACTIVE MCP
both in Active and Standby MCP devices if the Slave does not support Hot-Hot
mode.
This value is not applicable in Standalone/Warm Standby/Hot Standby
system level redundancy.
ACTIVE MCP HH – Active Slave communicates to the Master in the case Slave
supports Hot-Hot mode.
Communications statistics update at a configured interval to display the most current values.
Communications statistics update at a configured interval to display the most current values.
Tip: You can copy and paste text from the message window using your browser’s copy and paste functions
(e.g., Ctrl-C to copy and Ctrl-V to paste).
Logs
The Logs also known as System Logs page provides a report utility to display a list of system activities maintained
by the MCP and stored in the real-time database. The logs are useful for troubleshooting and tracking purposes.
The following reports are available:
• Control Log
• Diagnostic Log
• System Event Log
• User Activity Log
• Analog Report Log
• VPN Server Log (Available only to Administrator class users/roles)
SYSLOG-based event logging (i.e., System Event Log, Diagnostic Log, Control Log and
User Activity Log) should not be used for real time and Mission Critical purposes. Data
presented in the SYSLOG may not be updated in real time to correctly indicate the
status of monitored and controlled equipment.
For example, a power line could be listed as inactive in a system log, while in fact the
power line is active and its status in the system log may be updated significantly
later in terms of real time applications.
Only use SYSLOG-based event logging for system management, security auditing,
general informational and debugging messages.
Control Log
The Control Log lists command requests initiated by the master station or MCP and MCP responses. The following
types of command events are logged:
• Analog set points
• Digital controls
• Forcing of data values (from HMI or master station)
• Forcing of data quality flags (from HMI or master station)
• Addition/removal of information tag
Diagnostic Log
The Diagnostic Log lists application specific error messages. The following types of events are logged:
• Loss/recovery of device or master station communications
• Switching between Primary and Backup serial channels
• Communication errors
• Internal errors (for example, unable to connect, read/write errors)
• Data errors originating in device (for example, invalid date from protective relay)
The log can support 16384 records.
The following related actions can be performed:
Sort records
Clear records (Supervisor only)
You may see entries like the following in the user log: (pam_unix) session opened for user root by (uid=0)
(pam_unix) session closed for user root
These entries, denoted by the pam_unix prefix, are caused by the internal operation of the MCP security
system and can be disregarded. They do not indicate that someone has logged into the MCP using the root
account.
The following related actions can be performed:
Sort records
Clear records (Supervisor only)
View a Log
The System Logs page provides a search utility to filter, sort and display system logs records.
» To view a log:
1. Click the System Logs button on the Power Bar.
2. Click the tab for the log to be viewed.
3. Sort the logs using the drop-down menus at the top of the screen (e.g., Home directory).
4. Click the Refresh Filters button to include entries created since the window has been opened
Tip: You can copy and paste text from the report window using your browser’s copy and paste functions
(e.g., Ctrl-C to copy and Ctrl-V to paste) or export the data in a *.csv format.
NOTE: In Local HMI, the logs (.csv files) must be exported to /home/hmi/logs or into the USB mounted on the
MCP.
The following related actions can be performed:
Sort records
Clear a log
Clear a log
You may need to clear a log if the buffer has reached the maximum number of records. Login with Administrator
credentials via sudo mcpcfg or MCP settings and clear the system logs.
» To clear a log:
1. Select a log from the System Logs page.
2. Click Clear Log and click OK to confirm deletion.
All log entries are deleted from the system database.
Control Log
Table 3-23: Control Log
Field Description
Message ID Message ID is a unique identifier for the Control Log messages.
Message ID Message description
1 Set point operation
2 Control operation
3 Counter operation
4 Local command operation
5 Invalid command
Date Date and time (to millisecond) when the command was created.
Command Type Consists of one of the following Command Types:
• Set Point
• Control
• Counter
• Local Command - Consists of one of the following types.
▪ Force Value
▪ Force Quality
▪ Force Value and Quality
▪ Unforce
▪ Scan Inhibit
▪ Resume Scan
▪ Output Inhibit
▪ Permit Output
▪ Alarm Inhibit
▪ Permit Alarm
▪ Apply Tag
▪ Remove Tag
▪ Invalid
• Invalid
Field Description
Operation Type Each Command Type (except Local Command) consists of one of the following
Operation types:
• Select
• Operate
• Select Before Operate
• Direct Operate
• Direct Operate No Ack
• Freeze
• Clear
• Freeze and Clear
• No Operation
• Invalid
Control Type Control Type (Digital Control only) consists of one of the following types:
• Trip
• Close
• Pulse On
• Pulse Off
• Latch On
• Latch Off
• Invalid
Set Point Value (Analog Requested Value in the AO command.
Output Commands only)
On Time On Time period (in milliseconds) for the Digital Controls.
Off Time Off Time period (in milliseconds) for the Digital Controls.
Count Repeat Count value for the Digital Controls.
Input Direction Direction of the Command which consists of:
• Consumer writes the command to RTDB.
• Producer reads command from RTDB.
• Producer sends the command response to RTDB.
Status Status of the command.
Global ID A unique identifier generated by the RTDB for each command except for the
command with the operation type “Operate”. In the case of “Operate”, the identifier
is the previous command identifier used for “Select”.
Home Directory Home Directory of the device/application.
Point ID A 32-bit signed integer for the point that is unique within a home directory.
Point Reference User defined point reference (ASCII string) of the point.
Originator The source of the command. If the command originates from the remote HMI, this is
the ID of the Secession.
User Description An optional ASCII text field into which the user has entered additional information.
2 APPL_RESTARTS MsgText_Application_Restarts
3 CHILD_STARTS MsgText_Child_Starts
4 CHILD_RESTARTS MsgText_Child_Restarts
5 CHILD_TERMINATES MsgText_Child_Terminates
6 WATCHDOG_TIMER_APPL_REST MsgText_WatchDog_Timer_Appl_Restarts
ARTS
7 APPL_FAILUE_TO_START_ERRO MsgText_Application_Failed_to_Start_Error
R
8 BUFFER_OVERFLOW MsgText_Buffer_Overflows_DPA_Or_DTA
9 FAIL_TO_LOG_SOE MsgText_Failure_to_Log_SOE
10 FAIL_TO_LOG_ALARMS MsgText_Failure_to_Log_Alarms
11 FORCING_DATA_VALUES MsgText_Forcing_of_Data_Values_HMI_Or_Master
_Station
12 FORCING_DATA_FLAGS MsgText_Forcing_Data_Quality_Flags
13 APPLY_INFORMATION_TAG MsgText_Apply_Information_on_Tag
14 REMOVE_INFORMATION_TAG MsgText_Removal_Information_on_Tag
15 LOSS_OF_TIMESYNC MsgText_Loss_of_Time_Sync
16 RECOVERY_OF_TIMESYNC MsgText_Recovery_of_Time_Sync
17 DST_MISMATCH DST_Flag_Mismatch_Between_Time_Recieved_Fro
m_IED_and_Zoneinfo_File
18 LOSS_OF_EVENTS MsgText_Loss_of_Events_DCA_Or_DTA
19 INCORRECT_CONFIGURATION MsgText_Incorrect_Configuration
20 XML_PARSE_ERROR MsgText_XML_Parse_Error
21 MCP_START_ACTIVE_MODE Msg_Text_Gateway_Started_in_Active_Mode
22 MCP Msg_Text_Gateway_switching_to_Standby_Mode
_SWITCH_TO_STANDBY_MODE
23 MCP _CONFIG_SYNC_SUCCESS Msg_Text_Gateway_configuration_sync_to_Standb
y_Success
24 MCP _CONFIG_SYNC_FAILED Msg_Text_Gateway_configuration_sync_to_Standb
y_Failed
Field Description
25 MCP _RX_HB_FROM_STANDBY Msg_Text_Received_HB_from_Standby
26 MCP Msg_Text_Sent_message_to_SWWatchdog_to_rest
_SENT_RESTART_ALL_APPS art_all_Apps
27 MCP _SENT_STOP_ALL_APPS Msg_Text_Sent_message_to_SWWatchdog_to_sto
p_all_Apps
28 DAEMONIZE_FAILED Msg_Text_Daemonize_call_failed
29 MCP _FAIL Msg_Text_Failing_Gateway
30 MCP_START_NONREDUNDANT_ Msg_Text_Gateway_started_in_Non_Redundant_M
MODE ode
31 MCP _START_STANDBY_MODE Msg_Text_Gateway_started_in_Standby_Mode
32 MCP Msg_Text_Gateway_Switching_to_Active_Mode
_SWITCH_TO_ACTIVE_MODE
33 MCP_RTDB_CONSUMER_DELAY Msg_Text_Consumer_started_late_may_miss_even
_START ts
34 MCP_RTDB_CONSUMER_DELAY Msg_Text_Consumer_started_late_may_miss_even
_START ts
35 RECEIVED_RESTART MsgText_Received_Restart_IIN
36 RECEIVED_NEED_CONFIG MsgText_Received_Need_Config_IIN
37 MCP_FAILED MsgText_Gateway_Failed
38 MCP_RESTART_ALL_APPS MsgText_Gateway_restart_all_applications
39 CRITICAL_APPL_FAILED MsgText_Critical_Application_Failed
40 MCP_KILL_APPL MsgText_Kill_Application
41 PERCENTAGE_APPL_FAILED MsgText_Percentage_applications_Failed
42 EMERGENCY_ACCESS_CODE_CL MsgText_Emergency_Access_Code_has_been_clea
EARED red
43 EMERGENCY_ACCESS_CODE_CL MsgText_Emergency_Access_Code_failed_to_be_cl
EAR_FAIL ear
44 EMERGENCY_ACCESS_CODE_G MsgText_Emergency_Access_Code_has_been_gen
EN erated
45 EMERGENCY_ACCESS_CODE_G MsgText_Emergency_Access_Code_failed_to_be_g
EN_FAIL enerate
46 EMERGENCY_ACCESS_CODE_A MsgText_Emergency_Access_Code_has_been_aut
UTHENTICATED henticated
47 EMERGENCY_ACCESS_CODE_A MsgText_Emergency_Access_Code_has_failed_aut
UTH_FAIL hentication
48 EMERGENCY_ACCESS_CODE_EX MsgText_Emergency_Access_Code_has_expired
PIRED
49 RECIEVED_SIGNAL MsgText_Recieved_signal
Field Description
50 MAX_RESTARTS MsgText_Max_restarts_for_terminal_server
51 MISSED_MAX_HEART_BEATS MsgText_Missed_max_heart
beats_for_terminal_server
52 RESTART_MAIN_CONTROLLER MsgText_Restarting_main_controller_Too_many_
broken_threads
53 NO_SERVERS_FOUND MsgText_No_servers_found
54 DATALOG_INFO_MSG MsgText_DataLogger_Info_Message
55 DATALOG_ERR_MSG MsgText_DataLogger_Error_Message
56 CONNECT_TCP_MSG MsgText_TCP_Connect_Message
57 DISCONNECT_TCP_MSG MsgText_TCP_Disconnect_Message
58 RESET_TCP_SERVER_MSG MsgText_Resetting_TCP_Server_Message
59 TCP_SERVER_ERR_MSG MsgText_TCP_Server_Unknown_Error_Message
60 PAM_START_ERR_MSG MsgText_Failed_to_fork_authentication_child_
process_Message
61 VALID_APP_LICENCE_MSG MsgText_Valid_application_license_Message
62 INVALID_APP_LICENCE_MSG MsgText_Invalid_application_license_Message
63 LICENCE_NOT_FOUND_MSG MsgText_Application_license_not_found
64 APP_LICENCE_ADDDED_MSG MsgText_Application_license_added
65 APP_LICENCE_ADD_FAIL_MSG MsgText_Couldnot_add_new_application_ID
66 APPL_LICENCE_NOT_FOUND_M MsgText_Application_license_not_found_in_license
SG _file
67 TRIAL_LICENCE_NOT_ENABLED MsgText_Trial_License_not_enabled
_MSG
68 TRIAL_LICENCE_ENABLED_MSG MsgText_Trial_license_already_enabled
69 TRIAL_LICENCE_EXPIRED_MSG MsgText_Trial_license_already_expired
70 NO_APPL_LICENCE_MSG MsgText_Application_License_does_not_exist
71 UNABLE_TO_CONNECT_TO_AM MsgText_Unable_to_connect_to_amplsolver
PLSOLVER_MSG
72 RESTORE_CLONE_SNAPSHOT_S MsgText_Restore_Clone_Snapshot_Successful
UCCESSFUL
73 RESTORE_CLONE_SNAPSHOT_F MsgText_Restore_Clone_Snapshot_Failed
AIL
74 RESTORE_STANDARD_SNAPSH MsgText_Restore_Standard_Snapshot_Successful
OT_SUCCESSFUL
75 RESTORE_STANDARD_SNAPSH MsgText_Restore_Standard_Snapshot_Failed
OT_FAIL
76 FIRMWARE_UPGRADE_SUCCES MsgText_Firmware_Upgrade_Successful
SFUL
Field Description
77 FIRMWARE_UPGRADE_FAIL MsgText_Firmware_Upgrade_Failed
78 UPGRADE_RUNTIME_DATA_SU MsgText_Upgrade_Runtime_Data_Successful
CCESSFUL
79 UPGRADE_RUNTIME_DATA_FAI MsgText_Upgrade_Runtime_Data_Failed
L
80 SCHEMA_VERSION_CHECK_SUC MsgText_Schema_Version_Check_Successful
CESSFUL
81 SCHEMA_VERSION_CHECK_FAI MsgText_Schema_Version_Check_Failed
L
82 FIRMWARE_VERSION_CHECK_S
UCCESSFUL
83 FIRMWARE_VERSION_CHECK_F MsgText_Firmware_Version_Check_Failed
AIL
84 INVALID_SYSLOG_MESSAGE_ID MsgText_Invalid_SysLog_Message_ID
Event Date and time (to millisecond) when the event was created.
Date
Messag Type of message.
e Class
Descrip Brief description of the event. Some of the most commonly used messages are:
tion CHILD Started
CHILD Re-started
Application Started
Application Re-started etc.
Applica Unique identification number for the application.
tion
Connec Connection or Communication type of the application instance.
tion
Type
Home Home directory of the device/application.
Directo
ry
Instanc The execution instance of the application starting with the number one.
e
Misc This is an optional ASCII text of size 512 bytes for the user to log additional information.
Diagnostic Log
Table 3-25: Diagnostic Log
Field Description
Message ID System assigned number to identify the message.
Message Class Type of the message.
Date Date and time (to millisecond) when the event was created.
Description Brief description of the event.
Application Unique Identification number of the application.
Application Interface The execution instance of the application.
Home Directory Home Directory of the device/application.
User Action This is optional text for additional user-logged information.
Trends
The Trending also known as Data Logger application allows you to graphically monitor and record data from
devices connected to the MCP. You can also save and review historical reports created by the application.
Screen Areas
The Trends window is comprised of several areas.
Options
Y-Scale Auto-zoom
When selected, the Y-axis scale of the Viewing Area automatically expands and contracts to fit the largest visible
deviation. This setting does not affect the scale of the Summary Area.
Auto-trend
When selected, the viewing area always shifts to show the latest information received. For this option to be
available, enable No End Date in the Select Points window.
Execute Commands
This chapter contains the following sections:
Issue a Command
Acknowledge an Alarm (One-Line Viewer)
Acknowledge an Alarm Group (One-Line Viewer)
Analog Output Interface
Analog Set-point Interface
Digital Control Interface
Digital Output Interface
Navigate to Active Alarm Page (One-Line Viewer)
Point Forcing Interface
DataSource Types
Raise/Lower Control Interface
Tag/Inhibit Interface
Global Controls Disable
Control Lockout Feature
Issue a Command
The MCP supports the following control operations:
• Repeated control operations in quick succession (window remains open until cancelled)
• Separate Select and Operate commands
• For IEDs that do not support Trip/Close commands to the same point, the Trip command can be sent to
one digital output point and the Close command can be sent to another digital output point.
• Specification of control command attributes at runtime
You can execute a command on a data point from the Point Details page or the One-Line Viewer.
» To issue a command:
1. Select an item.
In One-Line Viewer, the Digital Output interface can be opened on any of the following three ways:
• Double click
• Left click and then select Digital Output Interface
• Right click and then select Digital Output Interface
In Point Details, the Digital Output interface can be opened in either of the following ways:
• Double click and then select the Digital Output Interface
• Right click and then select Digital Output Interface
2. Select a command option.
3. In the command interface window, enter the desired command settings:
This command is only applicable to the command interface window on the viewpoint details page.
Set up one control command as follows:
a. Select Function Code.
One of: Direct Operate, Direct Operate with No ACK, Select, Operate, Select Before Operate
b. Select Control Code.
One of Pulse On, Pulse Off, Latch On, Latch Off, Trip, Close
c. Enter a Pulse On time.
Trip/Close and Pulse On/Off controls only
d. Enter a Pulse Off time.
Trip/Close and Pulse On/Off controls only
The above options do not show at run time when using objects within the one-line screens.
4. Click Execute or OK to send the command request.
A message confirms whether the command was successful.
In a distributed system, the only reliable way to determine the success of a control operation is through
a hardwired digital input or analog input point providing the feedback of the process state being
controlled. The popup window that indicates when a control has been sent only indicates that the MCP
has sent the control to a downstream device.
If you do not complete an action within a pre-defined period, the operation is cancelled and the window
closes.
Below screen shot shows the Point Forcing interface for Digital Input in MCP from the Runtime HMI Point details
page.
4. Click a Point Status button to force a value. Click the button again to toggle the state.
Result: A message confirms whether the force action was successful or not.
5. Click Close.
Result: The Point Status window closes.
DataSource Types
The following table summarizes the functionality associated with each DataSource type.
Table 3-29: DataSource Types
DS type Control 1 Control 2 Feedback Feedback Value Control
Accumulator 1ACC Any integer>=0 NA
Status
Alarm Alarm Group – NA NA
Individual Alarm - NA
Analog Set 1AO 1AI Feedback AI: any float AO - between min and max
Point value
Analog Status 1AI Feedback AI: any float NA
value
Digital Control 1DO 1DO 2DI Set 2/4 state depending on Primary/Secondary DO State
the Primary feedback (defined for open/close state
Secondary feedback DI desc): 0 or 1
Point: State 00/01/10/11
Text
Digital Status 2DI Set 2/4 state depending on NA
the Primary & Secondary
DI Point: State 00/01/10/11
Text
Raise/Lower 1DO 1DO 1AI AI Feedback: any float Primary/Secondary DO Point
Control value State (defined for open/close
state desc : 0 or 1
TEXT 1TXT NA NA
The table below describes the fields and controls on the window for the following datasource types used in Point
Forcing Interface > Control:
• Digital Control
• Raise/Lower Control
• Analog Set Point
Table 3-31: Window Elements - DataSource Control
Element Description
Datasource The Datasource assigned to the Data Source Value in the One-Line Designer.
Status Indicates the Data Quality Status.
Primary Point Indicates the Primary point name which is providing the Datasource.
Primary Point Indicates the current value for the Datasource.
Value The Force Value button can be used to force the value to one of the following, depending
on the Datasource type:
• Digital Control: Force Primary or Secondary Digital Input point state. Select 0 or 1.
• Raise/Lower Control: Force the Primary or Secondary Digital Output point
state. Select 0 or 1.
• Analog Set Point: Force the Analog Output point value. The valid range is determined
by the min to max values specified in the Analog Set Point Datasource.
Secondary Point Indicates the Secondary point name which is providing the Datasource.
Secondary Point See the description for the Primary Point Value.
Value
Tag(s) Indicates the current Tag status. See for Tag/inhibit interface further information.
Datasource Indicates the status of the Quality attributes, including the state of any current control
Status/Control actions.
Tag/Inhibit Interface
The Tag/Inhibit Interface allows you to view the point status and tag or inhibit the value of any type of data
point. The MCP supports tagging on the following data types:
• Analog inputs
• Digital inputs
• Accumulators
• Analog outputs
• Digital outputs
» To open the Tag/Inhibit Interface:
1. Right-click a data object on the One-Line Viewer or right-click a point on the Point Details page.
2. Select Point Forcing Interface.
Result: The Point Status window appears.
The Point Status window displays the following information:
• Line ID/Device ID
• Data type
• Point Reference
• Point value
• Point quality
• Point name
• Quality attributes
NOTES:
• Values are in engineering units for Analog Input and Analog Output points.
• The quality status of the Point value and Quality attribute are visually indicated according to configured
color settings
Example Actions
» To add a tag (text label) to a One-Line Viewer diagram:
1. With the Point Status window open, click the Tagged (T) button.
Result: The Tag window appears.
2. Type in the desired text for the tag label.
3. Click OK.
Result: The Tag window closes.
Result: The tag text appears in the Tag field and as a tooltip for the elements in the One-Line Viewer.
» To inhibit an action:
• With the Point Status window, open, click either the Scan Inhibit (S) button and/or the Alarm Inhibit (A)
button.
Result: The Old Data (OD) button automatically becomes active when the Scan Inhibit (S) button is
clicked.
Result: The corresponding flag letters S, A and OD appear in the Point Summary, Point Groups table >
Quality Attributes column, and in the One Line diagram.
Operator Notes
This chapter contains the following sections:
Operator Notes
Operator Notes Log - Note records
Add a Note
Edit a Note
Operator Notes Log
Operator Notes
The Operator Notes page lists all the operator notes that have been entered by users and stored in the MCP
database.
Button Description
Note Number Automatically assigned number to identify the note.
Sequence Number Sequence Number to identify the original note or comments added to the note.
Sequence Number 0 indicates the original note and greater than 0 indicates the
comment(s) added to the original note.
Operator Name MCP HMI username of the note author (original or commented).
Date Modified Date and time that the note or comment was created.
Notes Free-form text entered by the note author.
Only a super user (root) can delete operator notes and operator notes log using mcpcfg configuration utility. Use
Option 9. Reset Database Tables > 4. Delete Operator Note records from mcpcfg configuration utility to delete
operator notes. This is the same as for all other entries (SOE, Alarm etc.).
If you type a PLUS (+) sign into an Operator Note, it appears as a blank space.
Add a Note
You enter a note from the Operator Notes page.
» To add a note:
Edit a Note
You edit a note from the Operator Notes page.
» To edit a note:
1. Double-click a note row.
Result: The Operator Notes window appears.
2. Edit your note.
NOTE: An existing note can be updated by adding a new comment, but the initial note cannot be
modified. This behavior is like paper-based operator logbooks. New Text and comment can be up to 256
characters, but the total size of the original note and all the comments for a note cannot exceed 2048
characters.
3. Click OK to save the note.
Result: The new comment for the note is saved.
Introduction
The MCP Gateway Local Configuration Utility (mcpcfg) is used to configure system level settings on the MCP. To
launch mcpcfg from the MCP command line the user must type “sudo mcpcfg” and the user password when
prompted.
“sudo” is a key cyber-security feature that strengthens the non-repudiation and protects from the attacks from
of malware that will try to execute privileged operations while user is are logged in under their account.
Typing “sudo” in front of functions in the MCP command line will prompt for the user’s password before executing
the command. Failing to use “sudo” will prevent the command from executing.
Using the Gateway Local Configuration Utility, User can perform the following actions:
1. Configure Authentication
2. Configure Network Settings
3. Configure Network Interfaces
4. Configure Secure Access
5. Configure Firewall
6. Configure Host Names
7. Configure Time & Time Sync
8. Reset System Logs
9. Reset Database Tables
10. Reset File Persistence Data
11. Local HMI
12. Configure Sync Manager
13. Redundancy (not available in G100)
14. ARRM
15. Suppress Forced Qualities To Masters
16. Emulate D20 RTU IEC101 DPA Unbalanced Mode Functionality
17. Configure IEC101+104 DPA Startup Quality Event Suppress Interval
18. Configure Serial Ports
19. Configure D.20 Port Settings
20. EdgeOS Host
21. Clear Chassis Intrusion State
22. Restore Clone Snapshot
23. Restore Factory Default
24. Reboot Device
General Note: for consistency within the MCP family, the mcpcfg menu options in are kept the same
between G100 and G500 and in same order but will return “functionality not available” when accessing a
non available option in G100. This allows users to use same scripted actions on both G100 and G500
common settings.
Settings Description
Show Time and : Use this function to display the time, time zone, and synchronization settings
Current Settings currently configured.
Set System Clock : Use this function to configure the current calendar date and time of day.
Note: The MCP system time is automatically set to the firmware build time
whenever the MCP reboots and the system time is less than the firmware build
time.
Set System Time Zone : Use this function to configure the desired time zone.
Select Time Source : Use this function to select and configure the time synchronization source (PTP,
IRIG-B or NTP). More details are described below.
Configure Time Output : Use this function to configure the time synchronization output. More details are
described below.
NOTE: Whenever system time goes back after time sync, the clock on Task Bar in local HMI will stop updating
till the updated time reaches back the time before time sync.
Please refer to section UEFI Settings for time sources (IN) and signals (OUT) available options and
combinations.
Step 5: In the Time & Time Sync Menu, select option 4 → "Select Time Source"
Then the following “Time & Time Sync – Select Time Source” screen will be launched:
This menu displays a list of time sources which the user can configure and enable/disable. More details about
each time sync mechanism are described below.
Use this menu to enable or disable the PTP time source. Also, this menu displays a list of PTP configuration
parameters which the user can configure based on their PTP Network Design.
In G500, there are three PTP ports, which are NET1-2, NET3-4, NET5-6 respectively. If PTP input is
enabled, all three PTP ports will be in listening mode at startup and then one port will go into slave
mode if a valid master clock is present on the PTP port.
PTP functionality is not available on the front G500 Maintenance port.
Step 2: The user can disable/enable PTP input and change the PTP parameters by selecting the individual
options as the following table shows:
5 Profile The set of allowed Precision Time Protocol (PTP) features applicable to a device.
In MCP we support two PTP profiles namely:
When the PTP input is enabled and the output is disabled (i.e., slave only), Priority 1 and Priority 2
settings will be ignored.
Any PTP setting changes require device reboot to take effect. This rule applies to both PTP IN and PTP
OUT.
If the PTP IN is enabled, the system time will be synced to the configured and enabled PTP source
only after seeing valid and good PTP signal once. Here “good” means the PTP master clock class is 6
or 7, and the UtcOffsetValid is true.
Configure IRIG-B IN
Configures the MCP to use IRIB-B as time synchronization source.
Step 1: In the “Time & Time Sync - Select Time Source” menu, select option 2 → IRIG-B:
The following “Select Time Source – IRIG-B Configuration” screen will be launched on the selection:
Step 2: User can disable/enable IRIG-B time source and change the IRIG-B time code format by selecting the
individual options.
The details about the two IRIG-B time code formats that MCP supports are as the below table presents:
Option Name Description
1 No BCD_YEAR Code (B002) Binary Coded Decimal, coding of time and day of year (HH, MM, SS,
and DDD); doesn’t consider year.
2 BCD_YEAR Code (B006) Binary Coded Decimal, coding of time, day of year, and year (HH,
MM, SS, DDD, and YY).
Any IRIG-B setting changes require device reboot to take effect. This rule applies to both IRIG-B IN and
OUT.
If IRIG-B IN is enabled, the system time will be synced to the configured and enabled IRIG-B source only
after seeing valid and good IRIG-B signal once. Here “good” means:
• For B006, only when its OOSYNC is false.
• For B002, it is always treated as good.
Configure NTP IN
Configures the MCP to use NTP to calibrate the system clock (only IPv4 is supported).
Step 1: In the “Time & Time Sync - Select Time Source” menu, select option 3 → NTP:
The “Select Time Source - NTP Configuration” screen will be launched as below:
The user can use this submenu to configure the Primary/backup NTP server IP Addresses and then enable/disable
the NTP client in MCP.
Step 2: In the “Select Time Source - NTP Configuration” menu, select option 2 → Primary Server IP Address to
configure the IP Address of the preferred NTP server.
Below is an example for the Primary NTP server IP Address configuration steps:
The user can select option 3 → Backup Server IP Address to configure the IP Address of a backup NTP
Server if needed. It is the same as the Primary server IP Address configuration.
Step 3: After the NTP server(s) are configured, the user can select option 1 → Enable/Disable to enable or
disable the NTP input in MCP. The option 1 depends on the current status of the NTP input. If it’s already
enabled, then the option 1 will be “Disable”. Otherwise, it will show “Enable”.
The Primary NTP server is the preferred server. The MCP will try to sync from this preferred server first. If
not available, it will try the backup NTP server.
To change the NTP settings, it is not necessary to reboot the system. The user must re-enable NTP to put
the new settings into effect. But after changing the NTP settings, it is necessary to restart the MCP to
update the NTP time synchronization related HAMA points.
And the “Time & Time Sync - Configure Time Output” screen will be launched.
Below is an example of the “Time & Time Sync - Configure Time Output” screen when PTP IN is
enabled:
The PTP Output is available only when the PTP Input is configured and enabled from “Configure Time &
Time Sync - Select Time Source” menu. And the IRIG-B Output is available only when the IRIG-B Input is
configured and enabled from “Configure Time & Time Sync - Select Time Source” menu. NTP Output
doesn’t have such restriction and is available all the time.
And then the below “Configure Time Output - PTP Configuration” screen will be launched on the selection:
If the Current PTP Output is disabled, option 1 in the “Configure Time Output – PTP Configuration” will
be “Enable”. Otherwise, it will be “Disable”.
The PTP Output will share same settings configured in the PTP Input, such as domain, priorities and so on.
And then the below “Configure Time Output – IRIG-B Configuration” screen will be launched:
If the Current IRIG-B Output is disabled, option 1 in the “Configure Time Output – IRIG-B Configuration”
will be “Enable”. Otherwise, it will be “Disable”.
The IRIG-B output will share same IRIG-B time code format as configured in the IRIG-B Input.
Step 3: Select option 2->(No) Signal Out When Out Of Sync (OOSYNC) to control whether to allow/suppress the
IRIG-B Output when the IRIG-B Input signal is out of sync.
By default, the IRIG-B output signal is suppressed when the IRIG-B input signal is out of sync. In order to allow
the IRIG-B output signal when the IRIG-B input signal is out of sync, select option 2 -> Signal Out When Out of
Sync (OOSYNC) in the “Configure Time Output – IRIG-B Configuration” menu:
If the IRIG-B output signal is not suppressed when the IRIG-B input signal is out of sync, the user can select the
option 2 -> No Signal Out Of Sync (OOSYNC) in the “Configure Time Output – IRIG-B Configuration” menu to
suppress it:
NOTE:If there is no PTP or IRIG-B input enabled, the option for NTP will be 1 as below:
After selecting the NTP option, the below “Configure Time Output – NTP Configuration” screen will be
launched:
If the Current NTP output is disabled, option 1 in the “Configure Time Output – NTP Configuration” will
be “Enable”. Otherwise, it will be “Disable”.
The IEC 60870-5-101+104 application uses a slightly different concept for local to UTC time conversion
to be consistent with the D2x product family. If the master is in a different time zone, you should set the
Time Mode field to set local/use local time. When the master time synchronizes the application, the
application calculates the difference between the internal MCP UTC clock and the master's time. The
application then applies this difference to the UTC timestamps it reports to the master. In effect, it
automatically calculates the time offset.
PC clock is set to No configuration mcpcfg System Clock: UTC time DNP Client Map File DNP Server Application
local time zone (-8) necessary mcpcfg Time Zone: -7 Time Offset: -7† Parameters Time Offset: -5†
If an event occurs at 13:00 UTC…
Event timestamp is Event timestamp is The MCP system database records the Local device reports Remote client receives the
displayed as 05:00 displayed as 06:00 event timestamp as 13:00 the event at 06:00 event timestamp as 08:00
†This field is configured in minutes, so the value entered in the configuration tool would be -420 and -
300 respectively. However, hours are shown in Table 4.1 for clarity.
NOTE: The above example is with IRIG-B B006 Input enabled and all other inputs and all outputs are disabled.
The following two snapshots are showing an example for the Analog Input/Digital Input displays about the Time
Sync when only IRIG-B input is enabled and active.
The following snapshot shows the Text info about PTP related clock ID information:
In every Configuration Type listed below, NTP OUT can be enabled and used to synch other devices.
MCP can act as a Master Clock, Slave Clock or both based on the Network port configuration and the PTP devices
connected.
There are different states available for the PTP ports and are described in HAMA - Hardware Asset Management
Application.
Master Clock
In this state, the MCP will sync to the connected master clock and cannot sync any downstream devices. All ports
are in listening or slave mode.
UR1 UR2
Master Clock
In Figure 4-2, MCP rear Ethernet port pair Net1-Net2 are connected to a master clock. The MCP synchronizes with
the master clock and the port pair connected to the clock becomes a slave and the remaining 2 pairs become
Masters. Note here that UR1 will not synchronize to the MCP because the Net1-Net2 pair is in slave mode.
Since UR2 is connected to the Net3-Net4 pair, the MCP acts as Master and synchronizes time to UR2.
The MCP Grandmaster Clock ID, MCP Master Clock ID, and the MCP Output Clock ID are updated in the Text Points
section of HAMA_LOCAL application as part of the runtime GUI, refer HAMA - Hardware Asset Management
Application.
UR
Networking
This section contains the following topics:
Background
Network Modes
Single Mode
Redundant Mode
PRP Mode
Substation LAN IED Types
Single LAN IED
Dual LAN IED
Redundant LAN IED
PRP LAN IED
Network Configuration
Network Interfaces
IP Configuration
Gateway Configuration
VLANS
Configure Network Interfaces
Run Time Statistics
Network LAN Scenarios
Legacy Single and Dual LAN Scenario
Legacy Single, Dual LAN + PRP Scenario
Legacy Single, Redundant and Dual LAN Scenario (Mixed System)
PRP Only Scenario
Mixed: Legacy + PRP LAN Scenario
Subnet Overlapping Rules
Custom Routing
Custom Routing Example
Configure Custom Routes in the MCP
Display Custom Routes
Delete Custom Routes
Network Summary
Background
Refer to the G500 Substation Gateway Instruction Manual (994-0152) or G100 Substation Gateway Instruction
Manual (994-0155) for details on the MCP Network ports and their supported connection types.
Network Modes
G500 supports three modes of network operation. At FPGA level, six rear ports are grouped together in to three
pairs. Front port cannot be grouped with rear ports.
In G100 the four ports are all independent, but presented in the settings in pairs to be consistent with G500.
Supported network modes are classified as:
• Single Mode
• Redundant Mode
• PRP Mode
NOTE:G100 does not support Redundant or PRP modes.
Single Mode
In this mode, ports in the pair would be independent to each other. Both network interfaces in that pair are
available for network configuration.
This type of mode can also be used to communicate with Dual LAN IEDs.
For e.g.: Say you have an IED with dual LAN communication. Dual LAN IED would have two IP (172.12.232.18 &
192.168.4.16). MCP Net1 can be configured with 172.x network & Net2 can be configured in 192.x network. Now
in DCA, while configuring this IED, 172.12.232.18 can be configured as Primary IP & 192.168.4.16 as Secondary
IP.
NOTES:
1. It is not recommended to use Net0 (G500) for IED communication.
2. By default, Net0 (G500) is in single mode & cannot be configured in PRP or Redundant mode.
3. Subnet overlap is not allowed in MCP. If same subnets are configured warning would be displayed.
For e.g.: Suppose say Net1 is configured with 172.12.232.56/16. Net2 IP cannot be 172.12.232.128/16.
Redundant Mode
Not supported in G100
In this mode, each pair can be configured as redundant and available for network configuration. This type of
mode is used to communicate with Redundant LAN IEDs. In this type of communication, one port would be active
at a time. If communication lost on one port, then Secondary port would become active.
For e.g.: Say configured Net1 – Net2 in this mode. Connect a Redundant LAN IED with MCP. In this topology Net1
& Net2 must be part of two different LAN switches. If network failure occurred on Net1 then communication
would switch to Net2 port. If communication restored on Net1, then communication will switch back to Net1 &
Net2 would become inactive.
PRP Mode
Not supported in G100.
In this mode, each pair can be configured for PRP and available for network configuration. This type of mode is
used to communicate with PRP LAN IEDs. In this type of communication, both ports would be active all the times.
If communication lost on one Network, then communication would continue another Network.
Network Configuration
This section describes how to configure IP, selecting type of mode & viewing stats of configured ports. This section
is divided in to:
• Network Interfaces
• IP Configuration
• Gateway Configuration
• VLANS
• Configure Network Interfaces
• Run Time Statistics
Network Interfaces
The Network Interface workflow allows you to configure the settings for the MCP’s network connections.
Default enabled network interface is configured with IP: 192.168.168.81/24 and is enabled as:
- Net0 in G500
- Net1 in G100
Due to hardware differences, Net0, Net5, Net6 are present only in G500.
NOTES: The MCP must be rebooted to activate any changed network settings.
The first time the MCP is started, you must configure the network interface locally through the
default enabled network port.
IP Configuration
The Internet Protocol (IP) can be configured as a:
• Static IP Address: Adapter, Active, or Alias IP Addresses
• Dynamic IP Address: Static or DHCP
Gateway Configuration
The Default Gateways can be configured for the Adapter and Active Interfaces.
Provide the Active Gateway Address if the MCP is configured to be operating in Redundant mode (either
Warm or Hot Standby or Hot-Hot ).
In case of Hot-Hot Redundancy mode, both Active and Standby MCP devices will always communicate with the
Adapter IP address with the IEDs if the client instances are enabled with Hot-Hot communication mode.
VLANS
MCP supports VLAN configuration. VLAN IP can be created with IDs from 2-4094. These IDs are common to all
interfaces i.e. say a VLAN ID 2 created one network port cannot be used in other network port. Each NetX interface
supports maximum 8 VLAN interfaces excluding Net0.
Dynamic Address
Configure the MCP to use network parameters that are provided by a DHCP server. This
requires a DHCP server to be on the same network as the MCP.
Note: Dynamic addressing is not compatible with MCP system redundancy as the active and
alias addresses are not provided by DHCP.
Network Zone
By default, all network interfaces except initial enabled adapter IP addresses are set to the
External firewall mode, which restricts the type of traffic permitted. You can change the
selected network interface to the Internal or External modes with this option. For more
information on the MCP firewall, refer to section Configure firewall settings.
VLAN
It is possible to use a VLAN when connecting MCP and VLAN supported device over a
network. By assigning your VLAN supported device to a VLAN, you can ensure a higher
priority for data transmitted from it and you can reduce the amount of extraneous
information the VLAN supported device receives from other devices on the network.
Setting Description
Figure 4-4: Sample VLAN configuration of Net1
In Figure 4-4 a VLAN has been created on the NET1 interface on the MCP. NET1 is connected
to a third-party switch, which is also connected to another third-party switch. These
connections are called the trunks since they carry the VLAN data as well as all other data
transmitted on the interface.
The switch B is also configured to support a VLAN on a certain network port, which is
connected to an IED. Since this port is dedicated to the VLAN, only information flagged for the
VLAN is transmitted to that IED. As well, information sent on this VLAN from the IED to device
can be classified with a higher priority, which ensures a higher likelihood of transmission
during times of network congestion.
You can configure the following options on each VLAN you create:
• IP Address, subnet mask, and default gateway: You can assign static IP Address / dynamic
IP Address. Once you have configured these values, you can use them to access your VLAN.
• Network zone: Assign the VLAN to either the internal or external network zone. For more
information on network zones, refer to section Configure firewall settings.
Note: You can always assign a VLAN to the external network zone. However, you cannot assign
it to the internal zone when the associated physical interface is configured to the external
zone.
• EGRESS priority mapping: Set the QoS priority level for data transmitted on this VLAN.
Priority levels range from 0 to 7 with 7 being the highest priority. If a QoS-enabled device
receives packets transmitted on this VLAN, it should apply a priority based on the level you
specify.
• Ethernet reorder flag header: This option is reserved for use by MCP staff for Technical
Support tasks.
Remove Configuration
All configured Adapter IP Addresses, Alias IP Addresses, Network Zones and VLANs are
removed.
Setting Description
Net2 (G100,
This option is used to enable EdgeManager connectivity on that port.
G500)
Current EdgeManager Configuration: To view the configuration
Net3 –
Configure EdgeManager Static IP Address: Option to configure Static IP Address, which will be
Net4 (only
used to enable connectivity to EdgeManager in the cloud/EdgeManager App.
G100)
Configure EdgeManager Dynamic IP Address: Option to configure Dynamic IP Address, which
Net5 – will be used to enable connectivity to EdgeManager in the cloud / EdgeManager App.
Net6 (only
EdgeManager Remove Configuration: Option to remove the configuration
G500)
Net1 –
Network port mode
Net2
Single
Net3 –
Use this option to configure the network pair in single mode. This mode is useful to
Net4
communicate LAN devices.
Disable Redundant mode: go to that pair & select single mode for that pair. This would update
the setting of that pair to single mode from redundant mode.
Use this option configure a network pair in PRP mode. This mode is useful to communicate
with PRP IEDs
Disable PRP mode: go to that pair & select single mode for that pair. This would update the
setting of that pair to single mode from PRP mode.
Current/Edit Configuration
This option is used to view the current configuration of a pair or to edit the configuration of
the pair.
Net3 –
SFP Configuration
Net4 (only
G100) Use this option to configure the SFP type inserted in Net3 and Net4:
1. Option C: 10/100BASE-TX
2. Option T: 1000BASE-TX
3. Option F: 100BASE-FX
Setting Description
4. Option S: 1000BASE-SX
5. Option L: 1000BASE-LX
3. To configure Net1-Net2, select option 2. Net1-Net2. Below sub menu (Figure 4-7) would appear.
a. Select Option 1. Single to enable Single Mode.
b. Select option 2. Redundant to enable Redundant Mode.
c. Select option 3. PRP to enable PRP Mode.
d. Select 4. Current/Edit Configuration to update configuration
4. If Single mode is selected in Figure 4.8, Net1 & Net2 can be configured separately as described in
step 2.
• G500 must be configured as Trunk port or PRP/Redundant mode both SFP must be of same type.
Figure 4-11: MIXED: Single/Dual LAN + PRP Scenario Diagram
• At least one pair must be configured in Redundant mode & other as single mode.
Figure 4-12: Legacy Single, Redundant and Dual LAN Scenario Diagram
PRP
Only Scenario
G500 operation within a current substation LAN containing only PRP IEDs (see Figure 4.16):
• All port pairs must be configured in PRP mode.
• The VLAN ID must be explicitly configured on switch ports (all others are blocked.
• VLAN tagging is optional for all traffic.
Figure 4-13: PRP only Scenario
Interface 2
Adapter Alias EdgeManager VLAN
Interface 1
2. Overlapping of subnet for VLAN IP configurations within same or different network interfaces are NOT
ALLOWED.
Net1/VLAN2 : 192.168.72.151/24 is not ALLOWED as it overlap with Net1 subnet configurations.
Net1/VLAN2 : 172.169.73.25/24 is not ALLOWED as it overlap with Net2 subnet configurations.
Net1/VLAN2 : 10.168.8.101/24 is ALLOWED as there is no overlap.
Net1/VLAN3 : 10.168.8.102/24 is not ALLOWED as it overlap with Net1/VLAN2 subnet.
Net2/VLAN3 : 10.168.8.102/24 is not ALLOWED as it overlap with Net1/VLAN2 subnet.
3. Overlapping of subnets across the interfaces are NOT ALLOWED.
Net2 EdgeManager : 10.8.5.115/8 is ALLOWED as there is no overlap with any other interfaces
Custom Routing
The MCP provides the user with an option to define custom routes through which the network traffic may be
forwarded.
The default gateway of the MCP is used to forward the packets to the destination IP if the destination IP is not
directly connected to the MCP. The assumption is that the default gateway will know how to reach any network
that the MCP itself cannot reach through one of its own interfaces.
Custom routing, on the other hand, defines static rules which specify the route through which the packet is
forwarded to reach the pre-defined destination subnet when MCP cannot reach it through one of its own
interfaces.
For the addition of custom routes in the MCP, the user may have to provide the following inputs:
• Destination IP Address,
• Destination subnet mask
• Next Gateway IP Address (optional)
• Network interface of MCP that needs to be used.
The IP Address of the Next Gateway should be in the same subnet as the network chosen for the MCP, or else an
error is displayed. For the addition of an individual IP Address on destination subnet, you need to set the subnet
mask to 255.255.255.255 or define the destination as single host.
If redundancy is configured, the user may have to cautiously configure the static routes in both MCPs.
The user may define multiple static routes in the MCP using the custom routing option for each of the available
network interfaces including VLAN and PRP.
Network Summary
The user can view a summary of all configured network interfaces in the MCP along with the type of interface.
Use MCP local configuration utility (mcpcfg) to access this feature.
Default Users
defadmin
MCP supports a default administrator defadmin that is used to connect to MCP from SSH client and from the
command line interface of Local HMI. The default password of default administrator user is defadmin. When user
logins using defadmin, only minimal configuration (adding new administrator group user, adding new emergency
group users, configuring network interface settings, rebooting the unit, restore snapshots using DSAS) will only
be available. Using this Default Administrator User would need to configure a nominated/custom administrator-
level user(s) to login and configure MCP.
• User: defadmin
• Password: defadmin
Steps to create New user:
1. After success login with defadmin/defadmin.
2. Launch sudo mcpcfg => user will be prompted with the below message.
5. Now Enter 2 option to Add New user => here user is prompted provide the username and the password
with which it must be created. Once done it will prompt with a note:
Note: This happens when the device is logged in for the first time and trying to create the User.
6. Press Enter and option ‘0’ to go back to previous menu screen.
7. Login with any of the newly added User. On successful Login the defadmin credentials will be deleted.
root
MCP supports a default root user that is used to connect to MCP from serial maintenance port. The default
password for the root user is geroot.
The root account password must be changed by end users, using MCP Local Configuration
Utility (sudo mcpcfg).
To configure users, go to the Configure Authentication option in mcpcfg, and select the authentication mode and
change the system access settings. The Authentication settings are described in Table 4-5.
Table 4-5: Authentication setting descriptions
Setting Description
Root Administrator Use this function to change the password associated with the system root user
Settings account.
Pass-Through Use this function to enable or disable pass-through password authentication. When
Password authentication is enabled, a valid username and password is required to access
Authentication client applications through pass-through ports. Enabled by default.
Administrator Group Use this function to create administrator-level users (if you are using local
Users authentication mode) and to change details associated with existing administrator
user accounts.
Emergency Group This function allows user to add/delete/modify emergency administrator users for
Users MCP. Adding emergency user is mandatory before changing the authentication
from Local to Remote (LDAP /TACACS) Authentication.
An emergency user can be used only when remote authentication has been
enabled and only if the remote authentication server is not available. In this case
emergency user will be allowed to login MCP and perform two key functions:
Change the mode authentication from remote to local mode
Generate emergency code to login HMI without changing authentication from
remote to local mode.
User can perform above two functions by using “sudo emergcfg” command after
login emergency user on any of the below three interfaces:
SSH session to MCP (Port-922)
Maintenance serial port connection to MCP (Baud Rate- 115200)
MCP Emergency option in local console
An Emergency group User is created using the following menu. Enter option 1 Configure Authentication and
then option 4 Emergency Group Users.
After selecting any one interface then Emergency user can login in to MCP. After login got successful need use
command “ sudo emergcfg” .User can perform below two key functions.
1. Change the Authentication mode from remote to local mode
2. Generate Emergency Access code to login HMI without changing authentication from remote to local
mode.
a. For Change the Authentication mode from remote to local mode enter option 1 Configure
Authentication.
d. Here Authentication mode is change from Remote to Local. We can use Local authentication
Users to login in to DSAS, HMI.
5. To generate Emergency Access code. Enter option 2 Configure Emergency Access from main menu.
7. Run the Runtime HMI and use the above access code to login HMI when Remote Authentication
servers are not available/not reachable. Here we need to reopen the HMI enter the Host IP details
then it will open window like below.
8. Here we need to enter emergency access code then HMI will open in emergency operator.
NOTE: Generated emergency access code will be valid for 5 minutes and once we used in HMI login
then code will be cleared.
9. If code is generated and not used and again trying to generate new code within 5 min duration. Then
message will be shown as “Emergency access code is already generated” like below:
Add a User
» To add a user:
1. Click Add to create a new user account.
Result: The Add User window appears.
2. Enter the user information.
3. Click OK.
Result: The User Management table is saved.
Delete a User
» To delete a user:
1. Click on a user record from the list in the User Management table.
Result: The Update User window appears.
2. Click Delete.
Result: The Delete confirmation popup appears.
3. Click Yes to confirm the deletion.
Auto Login
The MCP allows users to view a custom UI page both for Local and Remote HMIs sessions after a successful login;
for example: when choosing a one-line drawing (.dra file) or ActiveAlarmViewer.
The User Home Page field is available under the Access/User Management tab, allowing users to select a home
page for each configured user. See the User Management section for configuring a custom UI page per user.
Log in to Specific Custom UI Page in Remote HMI when Auto Login is DISABLED
Logging into a Specific Custom UI Page in Remote HMI mode upon successful login follows the below priority
when Remote UI Auto Login is disabled (to disable Remote UI Auto Login refer to section: >> Access > Automatic
Login) in the DS Agile MCP Studio:
1. User Home Page configured in the User Management tab.
2. RemoteUIMainPage is configured in the Systemwide-> Runtime GUI-> Global configuration settings
when User Home Page is not selected.
Default Home Page when above (1) and (2) are not configured.
Log in to Specific Custom UI Page in Remote HMI when Auto Login is ENABLED
Logging into a Specific Custom UI Page in Remote HMI upon successful login follows the priority below when
Remote UI Auto Login is enabled. (To enable Remote UI Auto Login, refer to section: >> Access -> Automatic Login)
in the DS Agile MCP Studio.
1. RemoteUIMainPage is configured in the Systemwide-> Runtime GUI -> Global configuration settings.
2. User Home Page configured in the User Management tab settings when RemoteUIMainPage is not
selected.
3. Default Home Page when above (1) and (2) are not configured
NOTE: When Remote UI Auto Login is enabled – remote users can still logout from the default auto login account
and log back with different credentials, within the “Remote UI Automatic Login Wait Time”; in this case, the
Specific Custom UI Page will be associated with the User Home Page as a priority, if configured.
Log in to Specific Custom UI Page in Local HMI when Auto Login is DISABLED
Logging into a Specific Custom UI Page in Local HMI follows upon successful login the below priority when Auto
Login is disabled. (To disable Local UI Auto Login, refer to section: >> Access -> Automatic Login) in the DS Agile
MCP Studio.
1. User Home Page configured in the User Management tab.
2. If User Home Page is not configured, then
a. If MCP redundancy is not configured, then LocalUIMainPage configured in the Systemwide ->
Runtime GUI -> Global configuration settings.
b. Or, if MCP redundancy is configured and the designation of MCP is Gateway A, then
LocalUIMainPageA configured in the Systemwide -> Runtime GUI -> Global configuration
settings.
c. Or, if MCP redundancy is configured and the designation of MCP is Gateway B, then
LocalUIMainPageB configured in the Systemwide -> Runtime GUI -> Global configuration
settings.
3. Default Home Page when above (1) and (2) are not configured.
Log in to Specific Custom UI Page in Local HMI when Auto Login is ENABLED
Logging into a Specific Custom UI Page in Local HMI upon successful login follows the below priority when Auto
Login is enabled. (To enable Local UI Auto Login; refer to section: >> Access -> Automatic Login in the DS Agile
MCP Studio
1. If MCP redundancy is not configured, then
a. LocalUIMainPage configured in the Systemwide -> Runtime GUI -> Global configuration
settings.
b. User Home Page if LocalUIMainPage is not configured.
c. Default Home Page when above (a) and (b) are not configured.
2. Or, if MCP redundancy is configured and the designation of MCP is Gateway A, then
a. LocalUIMainPageA configured in the Systemwide -> Runtime GUI -> Global configuration
settings.
b. User Home Page if LocalUIMainPageA is not configured.
c. Default Home Page when above (a) and (b) are not configured.
3. Or, if MCP redundancy is configured and designation of MCP is Gateway B, then
a. LocalUIMainPageB configured in the Systemwide -> Runtime GUI -> Global configuration
settings.
b. User Home Page if LocalUIMainPageB is not configured.
c. Default Home Page when above (a) and (b) are not configured.
NOTE: When Local UI Auto Login is enabled – local users can still logout from the default auto login account and
log back with different credentials, within the “Local UI Automatic Login Wait Time”; in this case, the Specific
Custom UI Page will be associated with the User Home Page as a priority, if configured.
Other Services/Settings
5. If you enter Y, then the controls from the Remote HMI are disabled.
If you enter N, then the controls from the Remote HMI are not disabled.
Result: The settings take effect.
The MCP Rsyslog service changes the firewall settings to allow messages/logs
on the configured port numbers for UDP/TCP based connections. These rules
update the Firewall rulesets once configured and rebooted.
While choosing a different port number configured for either TCP/UDP based
connections, ensure that no other application is using/running with the same
port number in the MCP.
In the firewall configuration, it is the user's responsibility to connect Internal zone
interfaces to networks that are protected from unauthorized use.
NOTE: Before proceeding with this step, ensure that no other MCP applications/services are using the same port
number. You can do this by manually checking the Connections tab of the MCP web/local HMI.
6. Return to the Configure Rsyslog Service menu.
7. Choose option 3. Configure Rx via TCP.
Result: The Receiving Messages via TCP - Settings menu appears.
This setting allows the MCP Rsyslog service to bind to the subnet/Host address. By default, no binding
filter rules are applied. That is, the MCP syslog application logs messages being pushed IEDs connected
through all available MCP's network interfaces.
10. Choose option 2. Add Hosts/Subnets to add Subnets and IP Address of the Hosts/IEDs.
11. Select the applicable interface from the list of available interfaces in the MCP.
If the subnet is missing in the list, choose one of the Custom Filters options.
Adding a subnet configures the MCP Rsyslog to log messages only being sent from the IED-IP Addresses
which are in range of the configured subnet.
12. Choose option 3. Delete Hosts/Subnets to delete any of the added addresses.
13. Choose option 1. Current Settings to view the current settings configured.
Configure Firewall
The MCP contains a firewall capable of stateful packet inspection to protect your device from unauthorized
access. By default, network interfaces on the MCP drop packets that are determined to be invalidly routed or
unsolicited.
SECURITY NOTICE: The MCP firewall is intended only to protect itself and does not extend protection to other
devices on the network. As such, it does not replace the need for a network firewall which offers deep packet
inspection and detailed configuration capabilities.
The MCP firewall is automatically configured by default to its most secure setting. The user assumes all
responsibility for associated security risks if the firewall configuration is manually changed.
It is the user's responsibility to connect Internal zone interfaces to networks that are protected from unauthorized
use.
Also, if the firewall is disabled then all the ports that are internal to the MCP will be visible/available to the external
scanner tools.
Network interfaces can operate in one of two modes:
Internal : The Internal mode permits traffic from known protocols and should only be enabled on
interfaces connected to known devices only. The Internal mode is typically used when the
interface is connected to the substation LAN.
External : The External mode offers a stricter set of rules and is the default mode for all interfaces except
Net0 and Net1. The External mode would typically be used when the interface is connected to
a WAN.
By default, the firewall allows outbound traffic on internal interfaces and blocks all outbound traffic except
outbound SSH on external interfaces. If you want the firewall to allow outbound traffic for a protocol on an
external interface, you must create a “custom” rule. See section: Add/Edit/Remove Custom Rules.
By default, the firewall blocks inbound traffic on both internal and external interfaces. The MCP automatically
generates rules allowing inbound traffic on internal interfaces for all configured services. If you want the firewall
to allow inbound traffic on an external interface, you may modify the associated “generated” rule to allow the
traffic on ALL interfaces rather than only the “Internal” interface. See section: Add/Edit/Remove Custom Rules.
Setting Description
Add/Edit/Remove Custom Use this option to create a custom firewall rule that is applied in addition to
Rules the system generated rules.
Configured Network Ports List of ICMP protocol types and TCP/UDP ports opened for inbound and
outbound traffic. Refer to Appendix HAppendix H for list of supported
TCP/UDP ports.
Setting Description
Each Operator Note record entered in the SQL database of the MCP contains a custom
Note/Text message entered by an operator. This record also contains the last modified
record date and time details.
Delete Use this command to clear or delete the Accumulator records from the SQL database of
Accumulator the MCP.
Records
NOTE: If redundancy is configured, it is required to perform same operations on PEER gateway as well.
Local HMI
You can configure the settings of the monitor connected to display port of the MCP output through the Local
HMI menu. The Local HMI settings are described in Table 4-12.
Table 4-12: Local HMI setting descriptions
Setting Description
Current Use this command to view the existing Local HMI Settings.
Settings
DPMS Use this function to enable or disable DPMS (Display Power Management Signaling). These
settings determine how much time must pass without user interaction before your monitor
is put into a reduced power mode. A setting of “00” prevents the MCP from triggering the
power mode.
The following modes are available:
• Stand-by: Monitor blanks but power supply remains on; screen restores in approximately
one second when reactivated by keyboard or mouse input by user.
• Suspend: Monitor power supply shuts off; screen restores in approximately 2-3 seconds.
• Turned off: Monitor is fully powered down except for an auxiliary circuit to detect a wake-
up signal; screen restores in approximately 8-10 seconds
Note: Refer to the manual that came with your monitor for more information on how it
receives and responds to DPMS signals.
Standby Local Use this command to enable or disable Standby Local HMI redirects to the Active MCP
HMI feature.
(Redundancy) Note: This parameter must be configured in both MCPs for proper operation. This feature
is not available in G100.
Sync Set ID A unique number used by the system to identify the sync set. Auto-incremented from 1.
Not editable; automatically assigned. Once a number has been
assigned, it is never reused.
Destination The IP Address of the remote device where the files are to be Valid IPv4 address
IP Address copied.
Destination The username used for SSH authentication on the remote 1 to 128 ASCII characters
Username system.
Password The password required for establishing a session on FTP. Text string; 1 to 22
characters
This is not applicable to rsync and sftp protocols.
Alphabetic letters, numbers
0 to 9, and special
characters are allowed
Source Path The absolute directory pathname that is synched to the remote 2 to 120 ASCII characters
Name device. pointing to a valid location
on the MCP file system
Destination The absolute directory pathname that the files are to be copied 2 to 120 ASCII characters
Path Name to pointing to a valid location
on the remote device's file
system
Check and The amount of time, in seconds, that the Sync Manager waits 60 to 86400 seconds
sync Interval before checking the source path for changes. If changed or
created files are detected, an rsync/ftp/sftp operation is
triggered.
Forced sync The amount of time, in seconds, that the Sync Manager waits 60 to 86400 seconds
Interval before a forced sync operation is triggered, regardless of
detected changes.
If rsync is configured, then forced sync recreates files that have
been deleted from the remote device as well as forcing the
transfer of files whose changes may not have been detected
due to MD5 collision, an extremely rare occurrence.
Table 4-16: Sync Set Example 1
Field Value
Configure Server rsync
Sync Set ID 1
Destination IP Address 192.168.1.1
Destination User Name admin
Password xxxxxx
Source Path Name /mnt/datalog/arrm
Destination Path Name /cygdrive/c/Stations_Data
Check and sync Interval 60
Forced sync Interval 60
Redundancy
This feature is not available in G100.
If you are configuring your MCP for use within a redundant setup, you can configure redundancy application
settings through the Redundancy menu. The Redundancy settings are described in Table 4.19.
Table 4-19: Redundancy setting descriptions
Setting Description
Current Use this command to view the current redundancy configuration.
Configuration
Enable/Disable Use this function to enable or disable redundancy functionality within the MCP.
Redundancy Redundancy Type
Setting Description
The available types of redundancy that can be configured are:
Warm Standby
Hot Standby
Hot-Hot
Note: This configuration parameter must be set to the same value on both MCPs.
Heart Beat Configure Heart Beat Timeout
Configuration The interval within which the MCP must receive at least one message or Heart Beat from
the other MCP. The valid range is 100 to 1000 msec; the default is 300 msec.
Note: This configuration parameter must be set to the same value on both MCPs.
Configure Heart Beat retries
Use this function to set the number of times the MCP re-transmits a Heart Beat message
before assuming that the other MCP has failed. The valid range is 1 to 10; the default is 3.
Note: This configuration parameter must be set to the same value on both MCPs.
Configure Heart Beat Communication Mechanism through Hot standby or Hot-Hot
Select the Heart Beat communication option:
1. Single LAN (Default)
2. LAN1 and LAN2
3. LAN and Serial
4. LAN1, LAN2 and Serial
Configure Heart Beat Communication Mechanism through Warm standby
Select the Heart Beat communication option:
1. Serial Only
2. Single LAN
3. LAN1 and LAN2
4. LAN and Serial
5. LAN1, LAN2 and Serial
Note: In Hot Standby and Hot-Hot Redundancy, the Heart Beat communication option
must include LAN and an optional serial.
Note: This configuration parameter must be set to the same value on both MCPs
Note: If the Heart Beat communication option includes a serial link, then a Primary and
an optional backup serial port must be configured on the Connection configuration page
of online HMI.
Configure IP Use this function to set the unique IP Address of the other MCP device configured within
Address of PEER the redundant system. If the PEER MCP has a second Ethernet interface, you can
Gateway configure it as well.
The adapter IP Addresses of the PEER MCP must be entered here (see the Ethernet
Connections topic in the MCP online help.
Configure Time Use this function to enable or disable time synchronization of the standby MCP from the
Sync with active MCP. This option should be enabled only if the standby MCP does not have an IRIG-
Standby B or NTP/SNTP based time synchronization mechanism.
Note: This configuration parameter must be set to the same value on both MCPs.
Configure Use this function to enable DTA applications to run normally on the standby MCP.
Enable/Disable If set to False, DTA applications suspend processing on the standby MCP.
DTAs in Standby
This setting is applicable to LogicLinx, Calculator, and Load Shed DTAs only.
Setting Description
Note: This configuration parameter must be set to the same value on both MCPs.
Configure Use this function to configure the A/B designation of the MCP.
Gateway A/B This parameter is only used if a switch panel is not configured. If a switch panel is
Designation configured, the Gateway A/B Designation is read from the switch panel and this
parameter is not used.
Setup Public Key Use this function to copy the public key of each MCP unit to the peer MCP. User shall need
Authentication to enter username of an administrator user account of PEER MCP unit (see List Users in
with Peer Administrator Group Users option in the Peer MCP unit mcpcfg settings)
Gateway Note: This function must be done on both MCPs.
Configure Use this function to configure the type of switch panel:
Switch Panel MASTER: A change-over can be initiated from the switch panel. The switch panel is also
Type used to route external serial connections to the active unit. Must also be configured in
“Connections”, see Redundancy Switch Panels.
SLAVE: The switch panel is only used to route external serial connections to the active
unit, a change-over cannot be initiated from the switch panel. Must also be configured in
“Connections”, see Redundancy Switch Panels.
SLAVE option is selected also when a switch panel is not present / not required, in which
case do not configure it neither in “Connections”, see Redundancy Switch Panels.
Note: This parameter is applicable for Warm Standby, Hot Standby and Hot-Hot
Redundancy modes).
Note: This configuration parameter must be set to the same value on both MCPs.
Enable/Disable If Non-Sync mode is disabled, then the standby MCP does not enter non-sync mode at
Non-Sync Mode startup, even if the firmware or configurations are not the same on both MCPs (see the
Non-Sync Mode topic in the MCP online help).
Note: This configuration parameter must be set to the same value on both MCPs.
Setting Description
Delete Records You can use the ARRM menu to delete the contents of these folder structures, as well as
temp and cache files, while leaving the directory structure intact for future downloads.
You can also retrieve downloaded records from the MCP using any FTP/SCP/SFTP client
as needed or on a scheduled basis
4. Enter 1. Set Emulate D20 RTU IEC101 DPA Unbalanced Mode Functionality to TRUE/FALSE based on
the current status.
NOTE:Set the value of Startup Quality Event Suppress Interval to 0(zero) seconds to disable this
functionality.
6. Enter Serial port number which needs to be configured. For e.g.: Enter 6.
7. The current settings for selected port are displayed, for change the settings enter Y or enter N to
navigate back to Serial Ports Settings menu.
• If “Y” :
• Enter your choice from the list to change the mode and restart the device for the changes to
take into effect.
5. If the D.20 HDLC card is installed, then select the card (option 1):
EdgeOS Host
In MCP, normally users do not need to access the Predix EdgeOS host shell. In case there is a need to access the
Predix EdgeOS host shell under some special circumstance, PETC provides a way for users to enable the Predix
EdgeOS host SSH/SCP service temporally. Refer to section Chapter 8 - EdgeManager and PETC for how to access
the PETC online documentation.
The function is used to perform the following actions:
• Host Net Info (in G100 is Net1, in G500 is Net0)
• Host Version Info
• Change Host Shell Idle Timeout
• Host Logoff
• Reset PETC Login User Credentials
Host Logoff
1. Select Host Logoff option.
RESULT:
o On Success:
• If Single USB is Present, then the list of Clone Snapshots will be listed or If no snapshots
are present, then folder EMPTY message will be displayed.
• If More than one USB is detected, then the list of detected USBs will be listed. On Selection
of the USB, the list of Clone Snapshots present in the USB will be listed. If no snapshots are
present, then folder EMPTY message will be displayed.
If USB is already mounted successfully:
o If Single USB is Present, then the list of Clone Snapshots will be listed or If no snapshots are
present, then folder EMPTY message will be displayed.
o If More than one USB is detected, then the list of detected USBs will be listed. On Selection of the
USB, the list of Clone Snapshots present in the USB will be listed. If no snapshots are present, then
folder EMPTY message will be displayed.
3) Once the snapshot is selected, user checks the below conditions and then copy the file to MCP for
restoring to the device.
o Checks for *. MCPCloneSnapshot.DS7zip extension
o Clone snapshots are password protected; It will provide 3 attempts for user to enter the
correct password
o Checks for schema version of the clone snapshot matches with the device schema version
o Replace the existing configuration and settings with the new ones from the selected clone
snapshot
4) Automatic reboot of the device takes place to make the changes effective.
Once the command is initiated, user will copy MCPCloneSnapshot.DS7zip file from the USB mount paths to
MCP device.
Automatic reboot of the device takes place to make the changes effective.
On confirmation, Warning message prompts with the information of that is going to be lost by user during restore
process and Re-confirmation will be prompted.
Here the user still has the possibility of exiting the current operation and go back to the Gateway Main Settings
Menu.
➢ On yes, the following operations will be performed in background:
o All the content and container’s will be cleaned up.
o Reboot will be triggered automatically.
o On Reboot, the system will be set to factory default settings.
Below screenshot refers to the “Restore to factory default settings screen that is been explained above:
Reboot device
This option allows user to reboot the MCP unit.
To reboot the MCP unit:
1. Log into the MCP Utilities page.
Result: The MCP#>> command prompt appears.
2. Type mcpcfg and press Enter.
Result: The Gateway Configuration Utility Menu appears.
3. Select option 24. Reboot Device
Result: The following prompt appears: Do you want to reboot Gateway? [Y/N]:
If you enter Y, then MCP unit will start rebooting
If you enter N, then it navigates back to earlier menu.
The user can reboot the unit using the following command “mcpreboot” at the command prompt.
How to access/logout
Users can access MCP Settings Web Interface through Local or Remote MCP connection. Remote access must
be completed using a supported web browser (Internet Explorer, Microsoft Edge, Mozilla Firefox, Google
Chrome). This section provides information on the following:
• Login – Local MCP
• Login – Remote MCP
• Initial Setup
• Logout
2. Once the MCP device is powered up and has a valid license installed, click on the MCP name via the
taskbar.
4. A default web browser will be opened showing MCP Settings Login screen.
Initial Setup
NOTE: Initial Setup section is identical between Local/Remote access.
1. Enter the default Username (defadmin), default Password (defadmin) and click Login.
2. If the defadmin account is used to login, you will be prompted to create an Administrator account in
order to access the full mcpcfg menu. Click OK.
• List Users
• Add User
• Change Password
• Remove User
• Enter the desired Username, conforming to the username rules as listed below:
o Username must be between 2 and 31 characters.
o Username must start with a lowercase alphabetical character.
o Username must only contain [a-z][0-9][-,_] characters.
• Enter the Full Name of the user.
• Enter the Password, conforming to the password security rules as listed below:
o Password must be between 8 and 199 characters in length
o Password must contain:
▪ 1 character from [a-z]
▪ 1 character from [A-Z]
▪ 1 digit from [0-9]
▪ 1 special character from the set [$%@!&]
RESULT: Pop-up window appears showing the Operation Status, click OK.
NOTE: defadmin account will be removed the next time you log in with the newly-created user and are
signed out of all defadmin sessions.
8. Navigate back to the main menu by clicking on the HOME link located at the upper left corner of the
page.
10. Select the desired Network port (default 192.168.168.81) which is connected to MCP device from the
list.
15. Navigate back to main menu and select Reboot Device tab.
18. Upon MCP reconnect, users can access MCP Web Interface remotely via the newly-configured IP
Address and a supported web browser. In the supported browser address bar, type in the new MCP
device IP (ex.: 172.12.222.222) as shown in figure below.
or
19. Press the ‘Enter key’ and the MCP Settings Login page appears.
20. Login using the newly-created admin username/password and click on the “Login” button.
23. Select Set Time Zone tab. Configure the MCP to the same time zone as remote PC.
24. Select applicable time zone. User can navigate the menu using Prev/Next buttons.
RESULT: The Operation Status dialog shows success message. Click OK.
28. A dialog is displayed informing the user to enter a date using the format YYYY-MM-DD. Enter today’s
date and select the Confirm button
29. A dialog is displayed informing the user to enter time, using the 24 Hr Format hh:mm:ss. Enter remote
PC time and select the Confirm button
RESULT: The Operation Status dialog shows success message. Click OK.
Logout
To logout, click on the link to “Logout” located at the upper right corner of the page as shown in figure below.
When you have successfully logged-out of the system, the screen below will be displayed.
Note that after 20 minutes of inactivity, the session is automatically timed out and a message will be displayed
as shown in below figure. In such cases, either click on “OK” and login again or click on any of the links to be
redirected to the log in page.
2. Once you have logged in to the MCP Settings, you can see a menu on the center and Logout option on the
top right of the screen. To explore the MCP settings use the menu options shown on the home page:
Configure Authentication
1. Click Configure Authentication from the main menu.
2. Click Change Root Password to change the password associated with the system root user account.
3. Change Password:
• Password cannot contain the user's account name or parts of the user's full name that exceed two
consecutive characters.
• Password must be at least 8 characters in length.
• Password must contain characters from all the following four categories:
o Should contain at least 1 character from [a-z]
o Should contain at least 1 character from [A-Z]
o Should contain at least 1 digit from [0-9]
o Should contain at least 1 special character from set [$%@!&]
• Re-enter password.
4. Click Confirm.
Pass-Through Authentication
1. Click Pass-Through Authentication tab.
RESULT: Pop-up window appears showing the Operation Status, click OK.
2. Use this function to create administrator-level users (if you are using local authentication mode) and to
change details associated with existing administrator user accounts.
6. Enter the desired Username, conforming to the username rules as listed below:
• Username must be between 2 and 31 characters.
• Username must start with a lowercase alphabetical character.
• Username must only contain [a-z][0-9][-,_] characters.
7. Enter the Full Name of the user.
8. Enter the Password, conforming to the password security rules as listed below:
• Password must be between 8 and 199 characters in length
• Password must contain:
o 1 character from [a-z]
o 1 character from [A-Z]
o 1 digit from [0-9]
o 1 special character from the set [$%@!&]
9. Click Confirm.
10. RESULT: Pop-up window appears showing the Operation Status, click OK.
15. RESULT: Pop-up window appears showing the Operation Status: Successfully changed the Password of
User, click OK.
17. Enter the Username which needs to be removed and click Confirm.
18. RESULT: Pop-up window appears showing message “Successfully deleted user : <Username>”
2. This function allows user to add/delete/modify emergency users for MCP. Adding emergency user is
mandatory before changing the authentication from Local to Remote (LDAP /TACACS) Authentication. This
emergency user can be used when remote authentication server is not available, and user is not able to
access MCP with remote authentication. In this case emergency administrator user will be allowed to login
MCP and perform two key functions:
3. Change the mode authentication from remote to local mode.
4. Generate emergency code to login HMI without changing authentication from remote to local mode.
User can perform above two functions by using “emergcfg” command after login emergency user on any
of the below three interfaces:
1. SSH session to MCP (Port-922)
2. Serial maintenance port connection to MCP (Baud Rate- 115200)
3. MCP Emergency option in local console (KVM)
7. If no users are added, then a pop-up window appears showing a message “No users in the Emergency
group found.” Click OK.
9. Enter the desired Emergency Group Username, conforming to the emergency group username rules as
listed below:
• Emergency Group Username must be between 2 and 31 characters.
• Emergency Group Username must start with a lowercase alphabetical character.
• Emergency Group Username must only contain [a-z][0-9][-,_] characters.
10. Enter the Full Name of the emergency group user.
11. Enter the Password, conforming to the password security rules as listed below:
• Password must be between 8 and 199 characters in length
• Password must contain:
o 1 character from [a-z]
o 1 character from [A-Z]
o 1 digit from [0-9]
o 1 special character from the set [$%@!&]
o Re-enter password and click Confirm.
RESULT: Pop-up window appears showing the Operation Status: New user successfully added, click OK.
12. Select Change Password tab to modify the password of existing emergency user.
13. Select the Emergency Group Username from the drop-down list.
14. Enter the Password, conforming to the password security rules.
18. Enter Emergency Group Username which needs to be removed and click Confirm.
RESULT: A pop-up window appears showing a message “Successfully deleted user : <Emergency Group
User>”, click OK.
19. To navigate back to the Main Menu, click on the Home link which is located at the upper left corner of the
page as shown in figure below.
Current Settings
1. RESULT: A pop-up window appears showing the Current Network Settings. Click OK.
Enable IP Forwarding
1. Click Enable IP Forwarding tab.
2. RESULT: A pop-up message appears showing the Operation Status. Click OK.
RESULT: A pop-up message appears showing the Operation Status: Successfully enabled ICMP echo,
click OK.
2. Enter new Machine Name [MCP] : <new machine name> and click Confirm.
RESULT: A pop-up message appears showing the Operation Status, click OK and reboot for changes to
take effect.
3. Click Back or click on the Home link which is located at the upper left corner of the page as shown in figure
below to navigate back to the Main Menu.
RESULT: A pop-up message appears showing the Operation Status, click OK and reboot for changes to
take effect.
3. Click Back or click on the Home link which is located at the upper left corner of the page below to navigate
back to the Main Menu.
2. You can see a menu showing the Network Interfaces on the screen. To explore them use the menu options
shown on the Configure Network Interfaces page as shown below:
4. Click Configure Adapter IP Address tab. Enter IP Address and Subnet Mask. Click Confirm.
5. A pop-up message appears showing the newly-configured static IP settings, click Yes to accept it and
reboot the device for changes to take effect or click No to abort the changes.
6. Click Configure Active IP Address (for redundancy) tab from the Net0 > Static IP Address menu.
7. Enter IP Address, Subnet Mask and click Confirm.
8. A pop-up message appears showing the newly-configured static IP settings, click Yes to accept the
settings or No to abort the settings.
9. Click Configure Alias IP Address (alternate subnet) tab from the Net0 > Static IP Address menu.
10. Enter IP Address, Subnet Mask and click Confirm.
11. A pop-up message appears showing the newly-configured static IP settings, click Yes to accept the
settings or No to abort the settings.
12. Click Back to navigate to Net0 menu.
13. Click Dynamic Address tab from the Net0 menu.
14. A pop-up message appears if the Static IP Address is already configured, click Yes to remove static IP
Address and enable dynamic address.
18. A WARNING message appears stating that all the interfaces VLANs will be assigned to the External zone.
• Click No to abort the operation.
• Click Yes to continue the operation and click OK.
o Enter the IP Address and Subnet Mask credentials and click Confirm.
o A confirmation message appears showing the newly-configured IP settings, click Yes
to accept it and reboot the device for changes to take effect or click No to abort the
changes.
o RESULT: VLAN ID created, click OK.
21. Navigate back to VLAN menu and click Remove VLAN.
22. Select the VLAN ID which needs to be removed from the list shown on the screen.
23. Click Yes to confirm or No to abort.
24. RESULT: Operation Status appears on the screen based on your action.
25. Navigate back to VLAN menu and click Update VLAN.
26. For updating the VLAN IP Address, click Update IP Address and select address type: Static or Dynamic IP
Address.
27. Enter the IP Address and Subnet Mask credentials and click Confirm.
28. A confirmation message appears showing the newly-configured IP settings, click Yes to accept it and
reboot the device for changes to take effect or click No to abort the changes.
29. RESULT: VLAN ID created, click OK.
30. Click Network Zone to check the current status of VLAN and select Yes or No to move the interface from
External zone to Internal zone and vice-versa.
31. Navigate back to VLAN menu and click Remove VLAN.
32. Select EGRESS Priority Mapping and select the VLAN ID from the list.
33. Select Current Configuration to view the socket priority.
34. Select Set Priority Mapping and enter the value based upon the credentials listed below and click Confirm.
• 7 (Highest) - Network management
• 6 - Voice
• 5 - Video
• 4 - Controlled load
• 3 - Excellent effort
• 2 - Undefined
• 1 (Lowest) - Background
• 0 (Routine) - Best effort
35. Navigate back to VLAN menu and click Remove VLAN.
36. Select Ethernet Reorder Header Flag (Debugging) and select the VLAN ID.
37. Click Yes to set VLAN Ethernet reorder header flag or No to abort.
38. Navigate Back to Net0 menu and select Remove Configuration.
39. Click Yes to take Net0 Settings Backup or No to continue.
40. A confirmation message appears showing the Backup file location and the settings which will be removed
for Net0. Click Yes to confirm or No to abort.
RESULT: A message appears showing the Operation Status: Net0 successfully assigned into its default
network zone.
41. Click OK and reboot the device for changes to take effect.
2. Select Single tab and click Yes to change the mode for Net1-Net2.
3. RESULT: Operation Status – Net1Net2 Mode is updated to Single. Click OK.
4. Select Redundant tab you will see a message that this is not supported in the device.
5. Select PRP tab from Net1-Net2 menu
• PRP is supported only in G500, is not supported in G100.
Select Current/Edit Configuration and select specified network interface.
Note: Refer to Chapter 8 - EdgeManager and PETC for port availability and additional information.
• Click No to abort.
• Click Yes to Enable Dynamic Addressing for a specific Network Interface Mode.
• Click Yes to confirm.
• RESULT: Operation Status – Dynamic Addressing enabled for a specific Network Interface
mode.
11. Click Network Zone to check the current status of Network Interface and select Yes or No to move the
Interface from External zone to Internal zone and vice-versa.
12. Navigate Back to Net1-Net2 > Current/Edit Configuration menu and click EdgeManager Connectivity
Configuration.
14. Select Current EdgeManager Configuration tab to view available configuration for EdgeManager
Connectivity.
15. Select Configure EdgeManager Static IP Address tab and enter IP Address and click confirm:
18. Click Yes to accept the changes and reboot the device for the settings to take effect or No to abort:
19. Select Configure EdgeManager Dynamic IP Address tab from EdgeManager Connectivity Configuration
menu:
20. Click Yes to Enable EdgeManager Dynamic Addressing for selected port, or No to abort:
Result:Operation Status window appears stating the Dynamic Addressing enabled for EdgeManager
Interface for the selected port.
Note:Reboot the device for the settings to take effect.
21. Select EdgeManager Remove Configuration tab from EdgeManager Connectivity Configuration menu:
• If Yes, the configuration is removed, reboot the device for changes to take effect. Click Ok.
23. Navigate Back to Net1-Net2 > Current/Edit Configuration menu and click VLAN.
o Enter the IP Address and Subnet Mask credentials and click Confirm.
o A confirmation message appears showing the newly-configured IP settings, click Yes
to accept it and reboot the device for changes to take effect or click No to abort the
changes.
o RESULT: VLAN ID created, click OK.
25. Navigate back to VLAN menu and click Remove VLAN.
26. Select the VLAN ID which needs to be removed from the list shown on the screen.
27. Click Yes to confirm or No to abort.
28. RESULT: Operation Status appears on the screen based on your action.
29. Navigate back to VLAN menu and click Update VLAN.
30. Select the VLAN ID which needs to be removed from the list shown on the screen.
31. For updating the VLAN IP Address, click Update IP Address and select address type: Static or Dynamic IP
Address.
32. Enter the IP Address and Subnet Mask credentials and click Confirm.
33. A confirmation message appears showing the newly-configured IP settings, click Yes to accept it and
reboot the device for changes to take effect or click No to abort the changes.
34. RESULT: VLAN ID created, click OK.
35. Click Network Zone to check the current status of VLAN and select Yes or No to move the interface from
External zone to Internal zone and vice-versa.
36. Navigate back to VLAN menu and click Remove VLAN.
37. Select EGRESS Priority Mapping and select the VLAN ID from the list.
38. Select Current Configuration to view the socket priority.
39. Select Set Priority Mapping and enter the value based upon the credentials listed below and click Confirm.
• 7 (Highest) - Network management
• 6 - Voice
• 5 - Video
• 4 - Controlled load
• 3 - Excellent effort
• 2 - Undefined
• 1 (Lowest) - Background
• 0 (Routine) - Best effort
40. Navigate back to VLAN menu and click Remove VLAN.
41. Select Ethernet Reorder Header Flag (Debugging) and select the VLAN ID.
42. Click Yes to set VLAN Ethernet reorder header flag or No to abort.
43. Navigate back to Net1-Net2 > Current/Edit Configuration and select Remove Configuration.
44. Click Yes to take Network Interface Mode Settings Backup or No to continue.
45. A confirmation message appears showing the Backup file location and the settings which will be removed
for that Network Interface. Click Yes to confirm or No to abort.
46. RESULT: A message appears showing the Operation Status: Net1 successfully assigned into its default
network zone.
47. Click OK and reboot the device for changes to take effect.
48. Navigate back to Configure Network Interfaces menu and follow the same Net1-Net2 procedure for
configuring Net3-Net4 Default Gateway
Default Gateway
1. Navigate back to Configure Network Interfaces menu and select Default Gateway tab.
3. Select new gateway interface (adapter) from the list and enter the Gateway IP Address and click Confirm.
NOTE: Create an Adapter configuration for Network Interface mode before adding a gateway for it.
RESULT:
Custom Routing
1. Navigate back to the Configure Network Interfaces menu and select Custom Routing.
2. Select Add Custom Route and enter destination IP Address and click Confirm.
3. A message appears to confirm the destination IP and individual host.
• Click No and enter the Subnet mask and click confirm or click Yes to continue.
• Click Yes to add the specified route to an interface.
• A pop-up window appears showing the network details.
• Click Confirm
4. Navigate back to Custom Routing menu and select Delete Custom Route.
5. Select the Network Interface which needs to be deleted and click Confirm.
Network Summary
1. Navigate back to Configure Network Interfaces and select Network Summary.
2. A message appears showing the Network Interface Adapter IP, Address type, Network Zone and EdgeOS
Host Details. Click OK.
Current Configuration
1. Select Current Configuration tab from Configure Secure Access menu.
3. Click OK.
• Select No to abort.
2. Select access ports from the list to configure and click OK once updated successfully.
2. Select Current Settings to view Receiving Remote Logs via UDP/TCP and Assigned UDP/TCP port no’s. Click
OK.
3. Select Configure Rx via UDP from Configure Rsyslog Service menu to Enable/Disable Rsyslog Logging
service and Edit UDP Port number.
4. Select Enable/Disable Rsyslog Service to view the current Rsyslog remote-host message reception service
via UDP status (Enable/Disable) and select Yes to change its state accordingly or select No to abort.
5. Select Edit UDP Port number to view the current port number configured and select Yes to configure
different port or No to continue with same port.
NOTE:
• It is recommended to use the Default 514 port.
• In case you really need to assign a new port number, ensure that no other Gateway
applications/services are using the same port number.
Click Yes to assign new port number and enter the new port number and click Confirm.
6. Select Configure Rx via TCP from Configure Rsyslog Service menu to Enable/Disable Rsyslog Logging
service and Edit TCP Port Number.
7. Select Enable/Disable Rsyslog Service to view the current Rsyslog remote logging service via TCP status
(Enable/Disable) and select Yes to change its state accordingly or select No to abort.
8. Select Edit TCP Port number to view the current port number configured and select Yes to configure
different port or No to continue with same port.
NOTE:
• It is recommended to use the Default 10514 port.
• In case you really need to assign a new port number, ensure that no other Gateway
applications/services are using the same port number.
Click Yes to assign new port number and enter the new port number and click Confirm.
9. Select Configure Hosts/Subnet filters tab from Configure Rsyslog Service menu.
10. Select Current Settings to view Hosts/Subnets configured in allowed senders list.
11. Select Add Hosts/Subnets, select the listed Network Interfaces and enter Custom Filters by selecting IP
Address and Subnet address.
NOTE: Use Custom filters when the IED IP add does not fall in the Configure Hosts-Subnets Filters listed
available subnet range.
12. Select Delete Hosts/Subnets tab from Configure Hosts/Subnets filters menu and select the Hosts/Subnets
from the list and select Yes to confirm.
Configure Firewall
1. Select Configure Firewall tab from main menu.
2. A list of Firewall Rules appears on screen displaying Input/Output, protocol, port, interfaces, Mdf, type
standby and status.
3. To Enable Firewall, click on the toggle switch icon on the top left of the window.
4. To Edit the firewall rule, click on the icon on the Actions column of a rule.
5. Select the Status of firewall rule from the dropdown list (Enable/Disable) and check in/out the Interfaces
required and click Confirm.
6. To Add a New rule, select Add button on the bottom left
• Select I/O,
• Select Protocol type
o UDP – 0 to 65535
o TCP – 0 to 65535
o ICMP – 0 to 255
• Select Status (Enabled/Disabled)
• Check in the Interfaces required and click Confirm to add.
7. Only the Custom rules can be deleted. To Delete rules, click on the icon on the respective rule. By
default, the generated rules cannot be deleted.
8. Once all the changes are done, click Apply button on the bottom right of the page and restart the device
for the changes to take effect.
9. Select Delete All Custom Rules to delete all custom rules except Generated Rules, select Apply and restart
the device for the changes to take effect.
Delete a Host
1. Select Delete a Host and click on the host which needs to be removed.
RESULT: Deleted the selected host successfully. Click OK.
Modify a Host
1. Select Modify a Host tab from the Configure Host Names menu.
2. Select the Host which needs to be modified.
NOTE: Change in Host name will change Machine host name also.
• Click No to abort.
• Click Yes to continue and enter Host name, IP Address and click Confirm to save changes.
• Reboot the device for changes to take effect.
2. Select Show Current Time Zone to view current date, time and time zone.
3. Select Set Time Zone and choose proper Time Zone File/Directory from the list. Choose Previous, Next
options to view all the available time zones.
RESULT: System Logger restarted; the time zone is successfully set to predefined zone.
NOTE: Restart Local HMI if it is running.
4. Select Search Time Zone and enter your specified time zone and click search to view the available time
zones and select it accordingly.
RESULT: System Logger restarted, the time zone is successfully set to predefined zone.
NOTE: Restart Local HMI if it is running.
PTP IN
NOTE:This feature is not supported in G100.
1. Select PTP tab to perform the following functions.
• Enable/Disable
• Domain
• Priority 1
• Priority 2
• Profile
• Select required profiles available from the list to activate them and reboot the device for the
changes to take effect.
IRIG-B IN
1. Navigate back to the Select Time Source menu from the Configure Time & Time Sync menu.
5. Select required Format available from the list to activate them and reboot the device for the changes to
take effect.
NTP IN
1. Navigate back to the Select Time Source menu from the Configure Time & Time Sync menu.
4. Select Primary Server IP Address tab and enter Primary Server IP Address [0.0.0.0] and click Confirm. Click
Yes to save changes.
RESULT: Primary Server IP Address is saved. Click Ok.
5. Select Backup Server IP Address tab and enter Backup Server IP Address [None] field with appropriate
either of the following values.
a. Enter 'None' to delete the Secondary configuration
b. Enter Secondary Server IP Address [0.0.0.0]
6. Click Confirm. Click Yes to save changes.
2. Current status of PTP OUT Settings is displayed on the screen, Select Enable/Disable tab to change the
status accordingly and reboot the device for the changes to take effect.
NOTE:If the Current PTP Output is disabled, “Enable” option is displayed on the “Configure Time Output –
PTP” menu. Otherwise, it will be “Disable”.
NOTE:The PTP Output will share same settings configured in the PTP Input, such as domain, priorities and
so on.
2. Current status of IRIG-B OUT Settings is displayed on the screen, select Enable/Disable tab to change the
status accordingly and reboot the device for the changes to take effect.
NOTE:If the Current IRIG-B Output is disabled, “Enable” option is displayed on the “Configure Time Output
– IRIG-B” menu. Otherwise, it will be “Disable”.
NOTE:The IRIG-B output will share same IRIG-B time code format as configured in the IRIG-B Input.
3. Select Signal Out/No Signal Out - When Out OF Sync (OOSYNC) tab to allow/suppress IRIG-B output when
the IRIG-B input signal is out of sync.
By default, the IRIG-B output signal is suppressed when the IRIG-B input signal is out of sync.
2. Current status of NTP OUT Settings is displayed on the screen, Select Enable/Disable tab to change the
status accordingly and restart the applications for proper update of HAMA Pseudo points.
NOTE:If the Current NTP Output is disabled, “Enable” option is displayed on the “Configure Time Output – NTP”
menu. Otherwise, it will be “Disable”.
Local HMI
1. Select Local HMI from the main menu.
3. Select General Settings: Active gateway access from standby HMI (redundancy): Disabled/Enabled.
NOTE: This is not supported in G100.
4. Screen Settings are displayed on the Local HMI Settings window:
• Desktop Mode:Window
• Monitor Horizontal Refresh Rate (hz):30-64
• Monitor Horizontal Refresh Rate (hz):50-90
5. DPMS Settings are displayed on the Local HMI Settings window:
• Standby Time (in mins, 0=disabled):10
• Suspend Timeout (in mins, 0=disabled): 20
• Off Timeout (in mins, 0=disabled): 00
6. Click Apply to apply settings successfully.
7. Click Close.
5. Navigate back to Configure Sync Sets and select Add Sync set tab.
6. Select Configure Server type:
• rsync
• ftp
• sftp
7. Enter Destination IP Address and click Confirm.
8. Enter Destination Username and click Confirm.
9. Enter Password credentials (shown only for ftp) and click Confirm.
10. Enter Forced sync Interval (60 to 86400 or 0 seconds) and click Confirm.
11. Enter Check and sync Interval (60 to 86400 or 0 seconds) and click Confirm.
12. Enter Source Path Name and click confirm
13. Enter Destination Path Name and click Confirm.
14. RESULT: Operation Status – Complete, click OK.
15. Select Edit Sync sets tab from Configure Sync Sets menu.
16. A list appears showing the syncset ID, server, IP Address and username. Select one of the Syncset ID which
needs to be Edited.
17. A list appears showing the Syncset ID credentials, click on the respective tab to edit it.
18. Select Edit Server to modify the existing server and select:
• rsync
• ftp
• sftp
19. Select Edit IP and enter Destination IP Address and click Confirm.
20. Select Edit Username and enter Destination Username and click Confirm.
21. Select Edit Forced sync Interval and enter Forced sync Interval (60 to 86400 or 0 seconds) and click
Confirm.
22. Select Edit check and sync Interval and enter Check and sync Interval (60 to 86400 or 0 seconds) and click
Confirm.
23. Select Edit Source Path and enter Source Path Name and click confirm
24. Select Edit Destination Path and enter Destination Path Name and click Confirm.
25. Navigate back to Configure Sync Sets and select Delete Sync set.
26. Select the Syncset ID which needs to be removed from the list and click Confirm to delete Syncset or cancel
to abort.
Redundancy
NOTE:Not supported in G100.
1. Select Redundancy tab from the Main menu.
Current Configuration
1. Select Current Configuration to view Current Redundancy Configuration:
2. Click OK.
Enable/Disable Redundancy
1. Select Enable/Disable Redundancy to view the current Redundancy status and to switch to different
modes:
• Enable/Disable
o A message appears showing the current Enabled Redundancy Type: Hot/Warm
Standby/Hot-Hot. Click Yes to Disable Redundancy.
o RESULT: Deleting all active HMI Sessions, changes saved successfully.
o Click OK.
• Enable - Warm Standby
o Click Confirm.
o RESULT:
▪ Deleting all active HMI sessions.
▪ Redundancy is Enabled, generating SSH Public/Private key pair.
▪ Removing old Public/Private keys, if any.
▪ Key location is /mnt/datalog/SSHKeys/id_rsa
o Click OK.
• Enable - Hot-Hot
o Click Confirm.
o RESULT:
▪ Deleting all active HMI sessions.
▪ Redundancy is Enabled, generating SSH Public/Private key pair.
▪ Removing old Public/Private keys, if any.
▪ Key location is /mnt/datalog/SSHKeys/id_rsa
10. Select any of the Heart Beat Communication Mechanism from the list and click Yes to confirm.
RESULT: Settings have been saved, click OK.
4. A public key generated was displayed on the window, click Yes to continue connecting.
6. RESULT:
• Successfully setup public Key Authentication with PEER Gateway.
• You need to perform this operation on PEER Gateway as well
• Click OK.
7. Select Configure Switch Panel Type tab from Redundancy menu.
8. Select switch panel type:
• MASTER
• SLAVE
9. RESULT: Switch Panel Type changed to selected. Click OK.
NOTE:
• This parameter is applicable to hot standby or Hot-Hot. In case of warm standby, this parameter
will be ignored.
• Non-Sync mode is enabled
o Standby Gateway goes to Non-Sync state at startup, if code or configuration are not
same on both Gateways.
• Non-Sync mode is disabled
o Standby Gateway does not go to Non-Sync state at startup, if code or configuration are
not same on both Gateways.
• Click Yes to Enable/Disable Non-Sync mode.
ARRM
1. Select ARRM tab from the main menu.
Delete Records
The function is used to perform the following actions:
• Delete all Records
• Delete Storage Directory Specific Records
• Delete Station Specific Records
• Delete Device Specific Records
• Delete Temp
• Delete Cache
Delete Temp
1. Select Delete Temp tab and select Confirm.
2. Select Yes to confirm or No to abort.
RESULT: ARRM application will be restarted and the details of Files deleted are updated in log file. Click OK.
Delete Cache
1. Select Delete Cache tab to:
• Delete All Cache Files
• Delete Station Specific Cache Files
• Delete Device Specific Cache Files
2. Select Delete All Cache Files tab and click Yes to confirm or No to abort.
If Yes, RESULT; Restarts ARRM application.
3. Select Delete Station Specific Cache Files tab and click Yes to confirm or No to abort.
• If Yes, enter Station Name and click Confirm.
RESULT: ARRM application will be restarted and the details of Files deleted are updated in log file.
Click OK.
4. Select Delete Device Specific Cache Files tab and click Yes to confirm or No to abort.
• If Yes, enter Station Name and click Confirm.
• Enter Device name and click Confirm.
RESULT: ARRM application will be restarted and the details of Files deleted are updated in log file.
Click OK.
NOTE:
o On expiration of configured suppression time or on disabling this mode, normal processing
will be resumed.
o Currently this feature implies only for IEC101-104 masters.
3. This function is used to perform the following actions:
• Suppression Mode Timer Stats
• Enable/Disable Mode for all Masters
• Enable/Disable Mode for only specified Masters
Set Emulate D20 RTU IEC101 DPA Unbalanced Mode Functionality to TRUE/FALSE
1. Set Emulate D20 RTU IEC101 DPA Unbalanced Mode Functionality to TRUE/FALSE, click Yes to confirm.
RESULT: Emulate D20 RTU IEC101 DPA Unbalanced Mode Functionality is set to selected., Click OK.
2. Current Value of Startup Quality Event Suppress Interval (in seconds) is displayed.
NOTE: Set the value of startup quality event suppress interval to 0 seconds to disable this functionality.
3. Enter Startup Quality Event Suppress Interval in Seconds [0 to 600] and click Confirm.
2. Select the desired port, mode and its termination if applicable (Disabled/Enabled). Click Apply.
3. If the D.20 HDLC card is installed, proceed to set the parameters as needed and click Apply if changed.
EdgeOS Host
1. Select EdgeOS Host from Main menu.
Host Net Info (Net1 for G100 & Net0 for G500)
1. Select Host Net Info tab to view Method, IP and Gateway information. Click OK.
Host Logoff
1. Select Host Logoff tab.
RESULT:
NOTE:Automatic reboot of the device takes place to make the changes effective.
If more than one USB is connected to device, then the list of USBs will be displayed, and the User need to
select the USB from which the Clone snapshot need to be restored.
4. If Single USB is connected to device, then the list of clone snapshot snapshots will be displayed. Select the
Clone Snapshot to be restored to the device or Cancel to abort.
5. If the selected Clone Snapshot is a password protected, then enter the password in the confirm password
window and press Confirm for button to save the snapshot or Cancel to abort the operation.
Note: Only 3 attempts are provided to provide correct password, failing will display message ‘Error: Unable
to extract with the password provided. Retry entering valid Password. Error: Max retries reached.’ OK to
return to main Menu.
6. On Selection of Confirm
a. If the Clone snapshot schema version match with device schema version, then snapshot copy is
successful with message ‘Snapshot will be applied after Reboot’.
b. If snapshot folder already contains snapshot, the Confirm operation popups to delete old clone
snapshot and copy the new one. Yes, to overwrite and proceed to save the snapshot- ‘`Snapshot
will be applied after Reboot ‘or No to abort replace the operation.
c. If the Clone snapshot schema version doesn’t match with device schema version, then snapshot
will fail with message ‘Snapshot's schema version:(XX) does not match firmware's schema version
(XX)’.
7. Automatic reboot of the device takes place to make the changes effective.
Reboot Device
1. Select Reboot tab from Main menu.
User Management
Overview
Add a User
Change a User Account
Delete a User
Configure User HMI Home Page
Auto Login
AI Text Enumeration
Enumeration Values
Analog Input Mappings
Systemwide tab
The Systemwide tab in the DSAS MCP Studio Configuration Tool provides access to a wide range of options for
the general operation of the MCP, including:
• System
• Point Groups
• Security
• Email
• Storage
• Real-time Database (RTDB)
• Event Logger
• HMI
• Locale
• Access Manager
• Authentication
• Runtime GUI
• Global
To access any of these configuration areas, select the appropriate item from the left pane.
Point Groups
The Point Groups option under the Systemwide tab->System allows you to configure the names of point groups
to appear on the Point Summary pages.
» To modify the point groups:
1. Open the DSAS MCP Studio Configuration Tool.
2. Click the Systemwide tab.
3. In the left pane, click System > Point Groups and modify the settings, if desired.
• Click Add to create a new group. Double-click a field to modify the settings.
• Select a row and click Delete to remove an application from the list.
4. Click Save to save your changes.
5. Click Commit Changes to apply the changes to the MCP.
NOTE: The point group assigned to ID number 0 will be used as the default point group. Newly created points
are automatically assigned to this group. You should not delete this point group.
Security
The Security options on the Systemwide tab -> system allows you to configure the general security features of
the MCP.
» To change security settings:
1. Open the DSAS MCP Studio Configuration tool.
2. Click the Systemwide tab.
3. In the left pane, click System > Security and change the security settings, if desired.
4. Click Save to save your changes.
5. Click Commit Changes to apply the changes to the MCP.
Security settings
Table 6-1: Security Settings
Email configuration
The MCP can send logs produced by the Digital Event Manager by email to a defined distribution list to notify
users of configured system exceptions.
Using the Server settings on the Systemwide tab -> System, you can update the email server information and
email address list. The MCP supports network and dial-up (PPP) connections to email servers.
» To set up email Server
1. Open the DSAS MCP Studio Configuration tool.
2. Click the Systemwide tab.
3. In the left pane, click System > Server and enter the settings for the email server.
4. In the left pane, click System > Recipients and add the email recipients.
• Click Add to create a new entry. Double-click a field to modify the settings.
• Select a row and click Delete to remove an email address from the list.
5. Click Save to save your changes.
Field Description
Enable Dial Out Select to enable PPP dial-up: True or False.
Dial Out Username Enter a username, if required by the email server.
Dial Out Password Enter a password, if required by the email server.
Server Type Select the type of authentication protocol (handshaking) configured on the
PPP server: Script based, PAP/CHAP or NT Based MSCHAP.
Primary Phone # (dial-up only) Enter the phone number.
Secondary Phone # (dial-up only) Enter a phone number if the Primary phone line is unavailable.
Idle Time Before Hanging Up Enter the amount of time (in seconds) the MCP waits before closing an idle
(dial-up only) connection. Range is 0 to 240.
Enable Log Session Select to activate a session log of the PPP dialer: True or False. The
messages are stored in the MCP system log.
Email Server Address Enter the IP Address of the email server in ipv4 format (123.x.y.z) or the fully
qualified domain name. To disable email notification, set to 127.0.0.1.
Email Server Username Enter the username of the email server. Default value is temp.
Email Server Password Password to be used when accessing the PPP server. Default password is
temp123$.
Sender Email Address Enter the email address of the MCP. Default is gateway@ge.com.
Field Description
Send Email Select to include the recipient on the email distribution list.
Email Enter the recipient's email address in the format name@domain.tld.
Name Enter the name of the email recipient.
Storage
Using the storage option, you will be able to allocate storage areas for the various subsystems, and this will be
done exclusively with the sliders as shown:
» To change storage settings:
1. Open the DSAS MCP Studio Configuration Tool.
2. Click the Systemwide tab.
3. In the left pane, click System > Storage and change the storage settings, if desired.
4. Click Save to save your changes.
5. Click Commit Changes to apply the changes to the MCP.
Figure 6-1: Storage
The following subsystems storage space is allocated with this storage option
• ARRM
• Data Logger
• Analog Reports
The maximum number of SOE, active alarms and historical alarms that can be present in the MCP database are
configurable and this configuration is done from storage option on the Systemwide tab.
RTDB Configuration
Using the RTDB option on the Systemwide tab you can change general settings for how data is handled by the
real-time database (RTDB).
» To change RTDB settings:
1. Open the DSAS MCP Studio Configuration tool.
2. Click the Systemwide tab.
3. In the left pane, click RTDB and change the settings, if desired.
4. Click Save to save your changes.
5. Click Commit Changes to apply the changes to the MCP.
RTDB settings
Table 6-4: RTDB Settings
Field Description
AI Persistence Select the type of analog input persistence: RAM.
The default value is RAM.
AO Persistence Select the type of analog output persistence: RAM. The default value is RAM.
DI Persistence Select the type of digital input persistence: RAM.
The default value is RAM.
DO Persistence Select the type of digital output persistence: RAM.
The default value is RAM.
ACC Persistence Select the type of accumulator persistence: RAM.
The default value is RAM.
Text Persistence Select the type of text persistence: RAM.
The default value is RAM.
Output Command Enter the amount of time, in seconds, that passes before a control request is cancelled.
Time To Live Range is 0 to 65535. Default is 5.
Max Startup Sync Enter the maximum start-up synchronization period (in seconds) for MCP applications to
register all events generated at start-up. If set to 0, there is no limit on the duration.
Range is 0 to 65535. Default is 300 secs
Event Queue Full Select how events are handled if the event queue is full: Do not lose events or Lose
Action newest events. Default is Do not lose events.
Event Distribution Select the distribution priority of events: High or Normal.
Priority
HMI Status Queue Enter the directory path and file name where the command status queue is stored. This
field is not editable.
Global Control Disable Indicates the directory path and name of the application that owns the Global Controls
Home Directory Disable point. This field is not editable.
Global Control Disable Indicates the Global Controls Disable point reference ID number. This field is not editable.
PointName NOTE: This point is owned by System Status Manager and is available for display in the
System Status Manager Point Details page.
Reject Control Request Select to reject control requests for data points that are currently marked offline: Yes or
on Offline Points No. If set to No, control requests are sent to the device.
Default is Yes.
This setting takes effect only after closing and reopening the Point Details window.
Report Offline Points if Report IED data points as OFFLINE if COMM LOST quality attribute is set.
Comm Lost Default is Yes.
Display 61850 Object The 61850 Object Reference is displayed if attribute is set to Yes.
Reference Default is Yes.
Event Logger
Using the Event Logger option on the Systemwide tab you can change general settings for how data is handled
by the Event Logger.
» To change Event Logger settings:
1. Open DSAS MCP Studio Configuration Tool.
2. Click the Systemwide tab.
3. In the left pane, click Event Logger and change the settings, if desired.
4. Click Save to save your changes.
Field Description
PRF NVRAM Size Enter the amount of space to allocate for the table containing the protective relay fault
(PRF) records. Default value is 1000 and is not editable.
Quality NVRAM Size Enter the amount of space to allocate for the table containing the quality records.
Range is 1000 to 10000, default is 1000.
NVRAM Select whether event records are stored in NVRAM: Default value is false and is not
editable.
Number of PRF Enter the maximum number of protective relay fault (PRF) records to store in the real-
Records time database. Range is 1000 to 10000, default is 5000.
Number of Quality Enter the maximum number of quality records to store in the real-time database.
Force Records Range is 1000 to 10000, default is 5000.
Notification Delay Enter the amount of time (in seconds) the Event Logger waits to buffer additional
events before sending a notification. Range is 30 to 3600. Default is 30.
Notification Enter the number of events that are buffered before a notification is sent. Range is 0 to
Threshold 65535. Default is 100.
PRF Notification Select the method to report PRF events. Range is Not Used, Email. Default is Not Used.
Locale
The MCP HMI can be localized to reflect regional languages, number formats, and date/time formats. Any
changes on the Locale page require a restart of your browser to take effect.
» To set up your locale:
1. Open DSAS MCP studio configuration Tool.
2. Click the Systemwide tab.
3. In the left pane, click Locale and edit the fields as required.
4. Click Save to save your changes.
5. Click Commit Changes to apply the changes to the MCP.
NOTE: Your changes do not take effect until you log out of the MCP HMI.
Field Description
HMI Language A list of languages available based on the language packs that have been installed on your
device.
Decimal Separator Select whether to use a comma or period to denote a decimal place. Selecting Locale
Symbol reverts to the default defined in the selected HMI Language.
Grouping Separator Select whether to use a comma, period, or space to denote hundreds of groupings. If None
is selected, no grouping is shown. Selecting Locale Separator reverts to the default defined
in the selected HMI Language.
Date Format Select the format to use when showing dates. Refer to the table below for an explanation
of string values. Selecting Locale Format reverts to the default defined in the selected HMI
Language.
Time Format Select the format to use when showing times. Refer to the table below for an explanation
of string values. Selecting Locale Format reverts to the default defined in the selected HMI
Language.
String Definition
dd Day of the month with leading zero
MM Month of the year with leading zero
yy Date of the year truncated to the last 2 digits
yyyy Date of the year
h Hour of the day in 12-hour format without leading zero
hh Hour of the day in 12-hour format with leading zero
H Hour of the day in 24-hour format without leading zero
HH Hour of the day in 24-hour format with leading zero
mm Minute of the hour with leading zero
ss Second of the hour with leading zero
SSS Microseconds of the hour with leading zeros
a AM/PM in the format a or p
Time Zone Select the time zone mode that should be used when the HMI displays time values.
Selecting Local Timezone displays events using the timezone that is configured on your
computer. Selecting UTC displays event timestamps as they have been recorded in the
MCP without modification.
Access Manager
The Access Manager is a utility in the MCP that controls access, authentication, and authorization to the MCP. It
allows or denies users access to specific features of the system at the point of log in, authentication or log out.
» To change system access settings:
1. Open DSAS MCP studio configuration Tool.
2. Click the Systemwide tab.
3. In the left pane, click Access Manager.
4. Modify the settings as required.
Field Description
Max. Simultaneous Enter the maximum number of Observer-level users who can be logged in concurrently.
Observers Range is 0 to 255. Default is 8.
Max. Simultaneous Enter the maximum number of Operator-level users who can be logged in concurrently.
Operators Range is 0 to 255. Default is 4.
Max. Simultaneous Enter the maximum number of Supervisor-level users who can be logged in
Supervisors concurrently. Range is 1 to 255. Default is 1.
Inactivity Timeout for Enter the amount of time (in minutes) that the MCP waits before automatically logging
Local HMI out an inactive user logged in locally. Range is 0 to 1440. Lower number offers more
security while higher number offers more convenience. Default is 15. A value of 0
disables auto logoff.
NOTE: It is required to logoff all Local HMI sessions and re-login again for this parameter
to take effect.
Inactivity Timeout for Enter the amount of time (in minutes) that the MCP waits before automatically logging
Remote HMI out an inactive user logged in remotely. Range is 0 to 1440. Lower number offers more
security while higher number offers more convenience. Default is 15. A value of 0
disables auto logoff.
NOTE: It is required to logoff all Remote HMI sessions and re-login again for this
parameter to take effect.
Inactivity Timeout for Enter the amount of time (in minutes) that the MCP waits before automatically logging
command line out an inactive user when using the command line utility. This setting applies to TELNET,
operations SSH, and serial sessions. Range is 10 to 60. Lower number offers more security while
higher number offers more convenience. Default is 15.
Lockout Count Enter the number of times a password can be incorrectly entered before the user
account is locked out. Range is 1 to 32. Default is 3.
Lockout Duration Enter the amount of time (in minutes) that a user must wait before attempting to log in
after being locked out. Range is 1 to 30. Default is 1.
Auto Login
Automatic Login’ related settings can be configured from HMI, Settings → Automatic Login tab, as shown
below:
Field Description
Local UI Automatic Select to skip the Local HMI log in when a user logs into the MCP through the local
Login substation computer setup (KVM card) and go directly to the Local HMI main page (home
page). Default is False.
NOTE: This feature is disabled for Cisco, TACACS+, and LDAP Remote Authentication.
SECURITY NOTICE: If Local UI Auto Login is set to true, the Local HMI will perform an
automatic login using the selected user privilege level and name, without additional
human authentication required. It is up to the system’s Engineer / Operations to assess
the effect and application of this behavior at runtime.
Local UI Automatic This parameter can only be configured if “Local UI Automatic Login” is set to true. The
Login Wait Time Local UI Automatic Login Wait Time parameter represents the wait time (in seconds) that
is available for the user to interrupt the system from entering the Local Graphical UI’s
Main Page from the Command Line Interface.
Local Automatic Login This parameter can only be configured if the Local UI Automatic Login parameter is set
Privilege Level to true. The Local Automatic Login Privilege Level parameter provides the user with the
option to configure the Default Privilege Level when navigating to the Local Graphical
UI.
Local Automatic Login This parameter can only be configured if the Local UI Automatic Login parameter is set
User to true. The Local Automatic Login User parameter allows the user to choose the default
user from the list of users configured under each Privilege Level
(Supervisor/Operator/Observer).
Field Description
Remote UI Automatic Select to skip the Remote HMI log in when a user logs into the MCP through the Remote
Login substation computer and go directly to the Remote HMI main page (home page). Default
is False.
NOTE: This feature is disabled for Cisco, TACACS+, and LDAP Remote Authentication.
SECURITY NOTICE: If Remote UI Auto Login is set to true, the Remote HMI will
perform an automatic login using the selected user privilege level and name, without
additional human authentication required. It is up to the system’s Engineer / Operations
to assess the effect and application of this behavior at runtime.
Remote UI Automatic This parameter can only be configured if “Remote UI Automatic Login” is set to true.
Login Wait Time
The Remote UI Automatic Login Wait Time parameter represents the wait time (in
seconds) that is available for the user to interrupt the system from entering the Remote
UI’s Main Page from the Command Line Interface.
Remote Automatic This parameter can only be configured if the Remote UI Automatic Login parameter is
Login Privilege Level set to true.
The Remote Automatic Login Privilege Level parameter provides the user with the option
to configure the Default Privilege Level when navigating to the Remote Graphical UI.
Remote Automatic This parameter can only be configured if the Remote UI Automatic Login parameter is
Login User set to true.
The Remote Automatic Login User parameter allows the user to choose the default
user from the list of users configured under each Privilege Level
(Supervisor/Operator/Observer).
Field Description
Device Identity This parameter is used to identify the current device. It appears on HMI Powerbar.
NOTE:
• If not specified, the hostname appears on the HMI Powerbar by default.
• It is necessary to re-login to the HMI to view the new identity on the HMI Powerbar
after the device identity has been changed.
If a device is running in Redundant mode, the suffix ‘-A’ or ‘-B’ is appended to the end of
specified value on the HMI Powerbar; for example: if the specified text is ‘This is my
device’, the text ‘This is my device-A’ appears on the HMI Powerbar when connecting to
Gateway_A. The appended suffix ‘-A’ or ‘-B’ is determined by the device configured as
Gateway_A or Gateway_B in the mcpcfg.
Tag/Inhibit Interface Enter the amount of time, in seconds, that a tag/inhibit interface window remains open
Inactivity Timeout before it automatically closes and cancels the operation.
Range is 10 to 65535.
Local Force Interface Enter the amount of time, in seconds, that a local force interface window remains open
Inactivity Timeout before it automatically closes and cancels the operation.
Range is 10 to 65535.
Execute Control Enter the amount of time, in seconds, that an execute control interface window remains
Interface Inactivity open before it automatically closes and cancels the operation.
Timeout Range is 10 to 65535.
Confirmation Inactivity Enter the amount of time, in seconds, that a confirmation window remains open before
Timeout it automatically closes and cancels the operation.
Range is 10 to 65535.
Normal Quality Select the text color to be used when showing normal power quality records. Color
Foreground Color choices available in Color palette window.
Normal Quality Select the background color to be used when showing normal power quality records.
Background Color Color choices available in Color palette window.
Invalid Quality Select the text color to be used when showing invalid power quality records. Color
Foreground Color choices available in Color palette window.
Invalid Quality Select the background color to be used when showing invalid power quality records.
Background Color Color choices available in Color palette window.
Questionable Quality Select the text color to be used when showing questionable power quality records. Color
Foreground Color choices available in Color palette window.
Questionable Quality Select the background color to be used when showing questionable power quality
Background Color records. Color choices available in Color palette window.
Engaged Quality Select the text color to be used when showing engaged power quality records. Color
Foreground Color choices available in Color palette window.
Engaged Quality Select the background color to be used when showing engaged power quality records.
Background Color Color choices available in Color palette window.
Zombie Quality Select the text color to be used when showing zombie power quality records. Color
Foreground Color choices available in Color palette window.
Zombie Quality Select the background color to be used when showing zombie power quality records.
Background Color Color choices available in Color palette window.
Field Description
Conditional Select the text color to be used when showing errors (Conditional formatting). Color
Formatting Text Color choices available in Color palette window.
for Errors
Conditional Select the background color to be used when showing errors (Conditional formatting).
Formatting Color choices available in Color palette window.
Background Color for
Errors
Conditional Select the text color to be used when showing Unavailable items (Conditional
Formatting Text Color formatting). Color choices available in Color palette window.
for Unavailable items
Conditional Select the background color to be used when showing Unavailable items (Conditional
Formatting formatting). Color choices available in Color palette window.
Background Color for
Unavailable items
Conditional Select the Font style to be used when showing Unavailable items (Conditional
Formatting Font Style formatting). Color choices available in Color palette window.
for Unavailable items
Record Block Size Enter the number of rows that appear per page on the Point Details and Point Groups
pages.
Range is 10 to 100. Default is 20.
Viewer Initial Drawing Enter the filename of the default drawing to display in the One-Line Viewer. Drawings
are created and saved using the One-Line Designer.
Default is main.dra.
Local UI Main Page Select a home page from the dropdown list to display after login to the Local HMI.
This parameter is applicable for Local HMI when Redundancy is not configured.
Local UI Main Page This parameter is only applicable when Redundancy (Warm Redundancy/Hot
for this GatewayA Redundancy) is configured. Select a home page from the dropdown list to display after
login to the Local HMI of the MCP with the designation Gateway_A. This is not supported
in G100
Local UI Main Page for This parameter is only applicable when Redundancy (Warm Redundancy/Hot
this GatewayB Redundancy) is configured. Select a home page from the dropdown list to display after
login to the Local HMI of the MCP with the designation Gateway_B. This is not supported
for G100
Remote UI Main Page Select a home page from the dropdown list to display after login to the Remote HMI.
This parameter is applicable to the Remote HMI, both when Redundancy is not
configured or not configured.
CGI request time-to- Enter the amount of time, in seconds, that passes before a CGI request is cancelled.
live
Range is 0 to 65535.
Default is 5.
Enumeration Values
An Enumeration is a set of value/text pairs that can be used by one or more analog input mappings. Your first
step in configuring AI Text Enumeration is to create one or more enumerations.
NOTE:
There are predefined.
Click the Add button to insert a new row in the table. Select one or more rows and click Delete to remove them.
Table 6-10: Enumeration Values
3. The block settings window on the right will display the default Line ID / Bay ID / Device ID for the GPIO, along
with the default ‘gpio_template.xml’
4. The ‘Auto Start-Up’ checkbox is enabled by default, this setting automatically starts the GPIO application
(Local/Remote HMI indicates the application is running under Connections/Point Details), otherwise the
application must be manually started
5. The Line/Bay/Device ID fields can be populated with unique names, the constraints on naming convention
are the same as existing applications in DSAS
6. The ‘Map File’ column shows the default ‘gpio_template.xml’, which can be edited, detailed below in step #7
7. Select ‘Edit’ the ‘Edit – gpio_template.xml’ window will be displayed; the window contains three tabs for
editing (Analog Input / Digital Input / Digital Output)
• Analog Input
o Point ID cannot be modified and indicates the internal point ID for the respective Analog
Input
o Point Reference/Description shows default values, the columns can be populated with
unique names, the constraints on naming convention are the same as existing applications
in DSAS
o Multiplier default value of ‘1’, the injected current/voltage on the specific Analog Input
value is multiplied by the configured multiplier amount, and represented accordingly in the
local/remote HMI
o Offset default value of ‘0’, the offset configured for the specific Analog Input will be added
to the injected current/voltage on the respective Analog Input, and represented
accordingly in the local/remote HMI
o Range Selection default setting ‘+/- 5V’ can be set to ‘20mA’, the local/remote HMI displays
the value according to the range selected.
▪ Note: To obtain proper values, there are internal jumpers on the MCP that need to
be set to configure each Analog Input individually as a current or voltage input.
Please refer to G100 Instruction Manual (GE part number 994-0155).
o Report Deadband default value of ‘0.1’, in % of FS. Can be set to a maximum value of ‘100’,
and is used to define the reporting threshold for the individual Analog Inputs
▪ Voltage Input Deadband calculation = 5 * configured_deadband_value / 100 (in V)
▪ Current Input Deadband calculation = 20 * configured_deadband_value / 100 (in
mA)
o Point Group default value of ‘PVal’ can be used to set the point group for the individual
Analog Inputs, adding a new group can be completed via Systemwide → Point Groups tab
• Digital Input
o Point ID cannot be modified and indicates the internal point ID for the respective Digital
Input
o Point Reference/Description shows default values, the columns can be populated with
unique names, the constraints on naming convention are the same as existing applications
in DSAS
o Debounce Filter (ms) default value of ‘0’, can be set to a maximum value of ‘1000’, the filter
is used to eliminate unwanted noise on the Digital Input; indicating the signal on the Digital
Input must be valid for 0-1000ms before the Digital Input value is changed/reported
o ON State represents the unique name which is displayed in the local/remote HMI when the
respective Digital Input is in the ON state, the constraints on naming convention are the
same as existing applications in DSAS
o OFF State represents the unique name which is displayed in the local/remote HMI when
the respective Digital Input is in the OFF state, the constraints on naming convention are
the same as existing applications in DSAS
o Point Group default value of ‘PVal’ can be used to set the point group for the individual
Digital Inputs, adding a new group can be completed via Systemwide → Point Groups tab
• Digital Output
o Point ID cannot be modified and indicates the internal point ID for the respective Digital
Output
o Point Reference/Description shows default values, the columns can be populated with
unique names, the constraints on naming convention are the same as existing applications
in DSAS
o OFF State represents the unique name which is displayed in the local/remote HMI when
the respective Digital Output is in the OFF state, the constraints on naming convention are
the same as existing applications in DSAS
o ON State represents the unique name which is displayed in the local/remote HMI when the
respective Digital Output is in the ON state, the constraints on naming convention are the
same as existing applications in DSAS
o Pulse Count default value ‘1’, can be set to a maximum of ‘100,000’, the amount configured
determines how many operations are applied on the respective Digital Output when a
PULSE control type is operated
▪ The ‘Pulse Count’ is overwritten by the value entered in the ‘Digital Output
Interface’ window when operating controls using local/remote HMI
o Pulse On Duration (ms) default value ‘1,000’, can be set to a maximum of ‘100,000’, the
amount configured determines the duration the relay remains in the ‘On’ position for the
respective Digital Output when a PULSE control is operated
▪ The ‘Pulse On Duration (ms)’ is overwritten by the value entered in the ‘Digital
Output Interface’ window when operating controls using local/remote HMI
o Pulse Off Duration (ms) default value ‘1,000’, can be set to a maximum of ‘100,000’, the
amount configured determines the duration the relay remains in the ‘Off’ position for the
respective Digital Output when a PULSE control is operated
▪ The ‘Pulse Off Duration (ms)’ is overwritten by the value entered in the ‘Digital
Output Interface’ window when operating controls using local/remote HMI
o Point Group default value of ‘PVal’ can be used to set the point group for the individual
Digital Outputs, adding a new group can be completed via Systemwide → Point Groups tab
8. Once changes to the default ‘gpio_template.xml’ have been performed, the changes need to be
synchronized to the MCP
• Using the Online Editor, simply select ‘Save’, enter a new name for the template, select ‘Save’ again,
followed by ‘Commit Changes’
• Using the Offline Editor, select ‘Save’, enter a new name for the template, select ‘Save’ again,
followed by ‘Commit Changes’, then ‘Save Session’, finally selecting ‘Sync to Device’
NOTE: The default ‘gpio_template.xml’ can be modified but not deleted, in the case an edited
template has been saved; the dropdown menu allows using the default template again along
with any modified templates
NOTE: Additional D.20 client configuration settings are available for device communications when configuring
D.20 connections on the D.20 Connection tab.
For D20 S card there are certain sets of fields supported and are given below:
Table 6-13: D20 S card - Peripheral Level
Parameter Description Range Default
Termination Board D20 S Digital Input Peripheral (64 DI) WESTERM D20 S WESTERM
WESTERM D20 SD D20 S
WESTERM D20 0SD
WESTERM D20 SZ
WESTERM D20 SZ2
WESTERM D20 SB
WESTERM D20 SI
WESTERM D20 SX
WESTERM D20 SDI
WESTERM D10 SI
Description D20 S Digital Input Peripheral (64 DI), N/A N/A
Supports max 32 ASCII Characters
Length of time used as the sample time
Filter Period (ms) 100 to 65535 0
window for chatter filtering.
For each point, fill in the fields as outlined in the table below:
Table 6-14: D20 S card - Point Level
Parameter Description Default Action required
Point Some general information about the point N/A Type a brief point reference of
Reference the point. Maximum length 64
ASCII Characters
Point Some general information about the point. Spare Type a brief description of
Description This information will be displayed in MCP the point. Maximum length 64
Point Details ASCII Characters
Point Group Refence for defined point group Pval Pval/Demand/Peak Demand
Point Type The type of point. Status Select from Single-point
Input State, Double-point state,
Form A Counter, or Form C
Counter.
Report Limit Specify the size of change in the new 0 times Type in the maximum
counter value from the previous value number of counts that can
before the application reports the new value occur before being reported
to the system point database. This is only to the MCP. 0 to 255
valid if the user has selected “Transition
Counter” or “Form C Counter” as the point
type.
Tolerant A period of time during which contact 0 ms Type in a value between 0
Phase bounce is "acceptable." Having a tolerant and 255 milliseconds.
period allows you to monitor and time-
stamp the initial state of change, while
ignoring any subsequent contact bounce.
Intolerant A period of time following the tolerant phase 6 ms Type in a value between 0
Phase during which contact bounce is not and 255 milliseconds.
"acceptable." It ensures that contact bounce
is not mistaken for a valid change of state.
Client Map
The client map file is based on a specific protocol. Each Client Map specifies what information or data to be
gathered from a device. The MCP polls for and retrieves information from a device according to a client map
file. The map file contains information on how polling is scheduled for a device based on the device’s capabilities,
frequency of polling, selected data points, etc.
• SEL Binary
• Modbus
You can use these default client maps or customize them for your system requirements. Once you create a client
map file, it becomes available to select on the Configuration page when assigning device connections.
NOTE: If you are running a LogicLinx program on your MCP and you change the point mapping, you must
synchronize the configuration within MCP Utilities to ensure that your LogicLinx mappings are still valid.
The MCP communicates with devices connected to your power network. These devices monitor and record
several types of information. The information can be generally classified in the following point groups, defined by
default in the MCP:
• Present values (PVal) that reflect the current state of the power system at an instance in time.
• Peak demand that reflects the minimum and maximum power flow conditions encountered.
• Demand
Point groups can be modified on the Systemwide tab in the MCP Online Configuration Tool.
The devices store all the information in a “map”. Refer to the device manufacturer’s manual for a list and
description of all the data points available from a device.
Device properties
Device properties are available on the Device Properties pane of Client Map tab on the Configuration page.
These settings shown vary based on the protocol selected.
The Device Properties pane allows you to view and modify the protocol settings for a specific client application.
These protocol specific settings of a device will also store in the client map file.
» To configure device properties:
1. On the Client Map tab, open a map file.
2. In the Device Properties pane, to modify a parameter, double-click the associated value and enter a
new value or select from the drop-down list.
Protocols
You can create map files for devices using the following protocols.
• D.20 Peripheral Client
• DNP3 Client
• Modbus Client
• SEL Binary Client
• IEC 60870-5-103 Client
• Genascii Client
• SNMP
DNP3 Client
Off Point Desc A detailed and localized description for the Off Up to 128 Unicode Double-Bit Digital
point in the map file. characters Input XA
Off Point ON State Off Point Text description of the 1 state. Up to 32 Unicode ON
characters
Off Point OFF State Off Point Text description of the 0 state. Up to 32 Unicode OFF
characters
On Point Ref A short identifier for the On point in the map Up to 66 ASCII DBDI XB
file. characters
On Point Desc A detailed and localized description for the On Up to 128 Unicode Double-Bit Digital
point in the map file. characters Input XB
On Point ON State On Point Text description of the 1 state. Up to 32 Unicode ON
characters
On Point OFF State On Point Text description of the 0 state. Up to 32 Unicode OFF
characters
Point Group Point group to which the On and Off points List of defined point Group assigned
belong. groups to ID number 0
Note :
Off Point is the digital input point representing the least significant bit of a DNP3 Double-Bit Binary Input object.
On Point is the digital input point representing the most significant bit of a DNP3 Double-Bit Binary Input object.
Modbus Client
The Modbus Client map defines how the MCP is configured to poll data from Modbus devices. The MCP supports
the following configurable Modbus data types:
• Read Coil Status – status of coils
• Read Input Status – digital input data
• Write Single Coil – set a single output to either ON or OFF in the device
• Write Single Register 6A – set a single holding register in the device (value required)
• Write Single Register 6B – set a single holding register in the device (value optional)
• Device properties
Modbus Client map settings are available on the Client Map tab when a Modbus protocol device type is selected.
Common Table
Device Properties
The MCP provides mapping settings for the Modbus Client settings on the right side of the Client Map tab.
Table 6-35: Modbus Device Properties
Setting Description Range Default
Inter Poll Delay Delay, in seconds, between polls. 0 to 60 0.1
Reconnect Interval Time, in seconds, between attempts by the MCP to 1 to 3600 60
bring an offline device online.
Endian Type Endian data interpretation in the map file. Little, Big Big
Max Block Size The maximum block size, in bits, of Modbus requests. 8 to 255 255
The SEL Binary Client map settings are available on the Client Map tab when a SEL Binary protocol device type
is selected.
NOTE: Additional SEL Binary configuration settings are available for device communications when configuring
SEL serial connections on the Serial tab.
Pseudo points are available for the SEL Binary Client application.
Auto-discovery
Most SEL devices support auto-discovery, also known as self-description. This feature allows you to use point
mappings automatically provided by the device rather than creating a custom mapping.
Point mappings provided via auto-discovery always override those specified in the selected map file. However, if
the remote device refuses an auto-discovery request, the MCP falls back to the mappings specified in the
configured map file.
The path for the auto discovery file is: /mnt/usr/Configure/MapFiles/DCA/selbin/<homedir>_autodiscovery.xml
NOTE: <homedir> is the Home Directory of the SEL Binary Client Connection which can be seen through either
Connections Tab or Point Details Tab in the Runtime GUI.
e.g.: /mnt/usr/Configure/MapFiles/DCA/selbin/0000007_autodiscovery.xml
Tip: It is recommended that you create a specific placeholder map file for devices that use auto-discovery; this
map file should be given a distinctive name that indicates to system operators that the selected map file is being
overridden.
Device Properties
Settings are available in the Device Properties pane on the Client Map tab. The following table lists the poll-
specific settings for the SEL Fast Meter device.
Table 6-40: SEL Binary Device Properties
• Measurand Type 1
• Measurand Type 2
• Measurand User Defined
• Time Tagged Message
• Output
• General Command
» To create an Information Object:
1. Click Add Info Object.
2. On the New Info Object window, enter values for the fields as described in the table below and click
OK.
3. Enter the number of rows and click Add to create and configure elements within the information object.
Table 6-42: Info Object Settings
Setting Description Range
Info Object Type The type of information object being created. General Command
Measurand Time Tag Relative
Measurand Type 1
Measurand Type 2
Measurand User Defined
Time Tagged Message
Info Object Name An identifier used within the configuration interface. 1 to 128 ASCII characters
Function Type The IEC 60870-5-103 function type corresponding to this 0 to 255
information object type reported by the remote device.
Info Number Starting address for this object. 0 to 255
The table directly below the Info Object type drop-down menu shows the configured Info Object Name and either
the Function Type and Info Number or the Default Function Type and Initial Info Number of the selected
information object.
When General Command or Time Tagged Message types are selected, the Default Function Type value indicates
the default function type that is used when a new information object element is added. The Initial Info Number
value is incremented for each new information object element that is added.
NOTE: Additional info-object level settings are available for Time Tagged Message objects. These are described
in the table below.
For all other info object types, values entered for Function Type and Info Number are used for all information
object elements that are created.
General Command
Table 6-43: General Command Element Settings
Setting Description Range Default
Function The IEC 60870-5-103 function type 0 to 255 0
Type corresponding to this information object
type reported by the remote device.
Info Number Address for this object. 0 to 255 Incremented by 1
from starting address
Point A short identifier for the point in the map Up to 66 ASCII characters <Info object name> X
Reference file.
Point A detailed and localized description for Up to 128 Unicode <Info object name> X
Description the point in the map file. characters
ON State Text description of the 1 state. Up to 32 Unicode characters ON
OFF State Text description of the 0 state. Up to 32 Unicode characters OFF
Point Group Point group to which the point belongs. List of defined point groups Group assigned to ID
number 0
Measurand Type 1
Table 6-45: Measurand Type 1 Element Settings
Setting Description Range Default
Point A short identifier for the point in the map file. Up to 66 ASCII <Info object
Reference characters name> X
Point A detailed and localized description for the point Up to 128 Unicode <Info object
Description in the map file. characters name> X
Multiplier Scale factor of the point (m of formula mx +b). Full range of 64-bit Float 1.0
Offset Scale factor of the point (b of formula mx +b). Full range of 64-bit Float 0.0
Element Specifies the name of each element. current L2 or I.N, current L2 or
Name voltage L1-L2 or V.EN, I.N
active power P,
reactive power Q
Measurand Type 2
Table 6-46: Measurand Type 2 Element Settings
Setting Description Range Default
Point Reference A short identifier for the point in the map file. Up to 66 ASCII <Info object
characters name> X
Point A detailed and localized description for the point Up to 128 Unicode <Info object
Description in the map file. characters name> X
Multiplier Scale factor of the point (m of formula mx +b). Full range of 64-bit 1.0
Float
Offset Scale factor of the point (b of formula mx +b). Full range of 64-bit 0.0
Float
Element Name Specifies the name of each element. current L1 current L1
current L2
current L3
voltage L1-E
voltage L2-E
voltage L3-E
active power P
reactive power Q
frequency f
Point Group Point group to which the point belongs. List of defined point Group assigned
groups to ID number 0
• Bitstring
• Double Point
• Integrated Total
• Measurand
• Single Point
• Step Position
• Output
• Double Command
• Single Command
» To create an Information Object:
1. Click Add Info Object.
2. On the New Info Object window, enter values for the fields as described in the below Table 6-54 and
click OK.
3. Enter the number of rows and click Add to create and configure elements within the information object.
Table 6-54: IEC 60870-5-101+104 Client Info Objects
Bitstring
Table 6-55: Bitstring Element Settings
Double Command
Table 6-56: Double Command Element Settings
Double Point
Table 6-57: Double Point Element Settings
Integrated Total
Table 6-58: Integrated Total Element Settings
Measurand
Table 6-59: Measurand Element Settings
Setpoint Command
Table 6-62: Setpoint Command Type 2 Element Settings
Single Command
Table 6-63: Single Command Element Settings
Single Point
Table 6-64: Single Point Element Settings
Step Position
Table 6-65: Step Position Element Settings
Transaction options
The following table lists the options that can be configured for each transaction.
Table 6-68: Generic ASCII Client Transactions Options
Setting Description Range Default
Transaction name A user-supplied name to identify the transaction. 1 to 64 characters none
Parsing policy Select a parsing policy to be used by this transaction. List of configured none
name parsing policies
Trigger Select how message requests are made by this Cyclic Cyclic
transaction: Periodic
• Cyclic: The remote device is polled for Unsolicited
information relative to other transactions based
on the number of cycles per poll.
• Periodic: The remote device is polled for
information at the configured time frequency.
NOTE: When multiple transactions are defined,
the MCP verifies each transaction for scheduling
based on round robin mode. If the cycle time to
verify all transactions exceeds the Periodic
interval (Msec per poll), the MCP schedules the
transaction only when it completes the scan
cycle and detects the expiry of the Periodic
interval for any transaction.
• Unsolicited: The MCP accepts messages from the
remote device as they are made available.
Support for the Trigger mode setting is available
for the SEL family of devices.
Timestamp Specifies whether timestamp information should be None None
parsing parsed from information on the transaction level or TransacLevel
on the individual point level. Select None if a PointLevel
timestamp should be assigned based on the MCP
system clock.
Timestamp Specify how timestamps are to be parsed from See Timestamp
definition incoming messages. Only available if the timestamp Definition.
parsing field is set to TransacLevel.
The default definition of {$CHKSUM16$} expects the checksum be available in the 2nd and 3rd byte from the end
of response.
If there is any misconfiguration of the checksum definition as per the supported syntax checksum definition is
considered by the MCP as a regular substring to be used in the matching criteria.
Examples of incorrect configurations are:
• {$CHKSUM16$^0}
• {$CHKSUM16$^999999999999}
• {$CHKSUM16@^5}
As an example of a correct configuration, consider a response as IFF12414F#; then the valid Pattern Definition is
to be:
• I..{$ADDR$}{$CHKSUM16$}
• I..{$ADDR$}{$CHKSUM16$^7}
• I..{$ADDR$}{$CHKSUM16$#2}
• I*{$ADDR$}*{$CHKSUM16$}
• I*{$ADDR$}*{$CHKSUM16$^7}
• I*{$ADDR$}*{$CHKSUM16$#2}
The incorrect configuration of predefined variables can lead to mismatching requests which results in TIMEOUT
for the requests.
Timestamp definition
The Timestamp window allows you to define a custom timestamp parsing policy for use in a transaction. The
following table lists the options that can be configured for each timestamp definition.
Table 6-69: Timestamp Options
Setting Description Range Default
Date format The format that the remote device reports the MM/DD/YY MM/DD/YY
date in. MM/DD/YYYY
DD/MM/YYYY
Date parsing type The type of method that the MCP uses to interpret Token Position
the data to determine the date. Position
Token: the data is divided into tokens based on a
defined separator pattern.
Position: The contents of the timestamp are
provided in a fixed data position.
Date parsing start The starting position of the date information Numeric value 0
position within the data. Token date parsing type only.
Date parsing The length of the date information within the Numeric value 0
length data. Token date parsing type only.
Date parsing index The array index that contains the date. Numeric value 0
Date parsing initial If the date token contains a prefix (for example, 0 to 20 printable ASCII None
string “Date: “) it can be specified here. The MCP characters
removes this string from the token.
Enter None to disable parsing.
Add Analog Input Points, Digital Input Points and Text Data Points
Once you have created a transaction, you can add Analog Input points, Digital Input points, and Text Data points
based on messages received by the MCP. To add one or more points, select the number of points you wish to
add and click the Add button. To remove points, select them and click the Delete button.
The following three tables list the options that can be configured for each point type:
• Analog Input Points
• Digital Input Points
• Text Data Points
Application Tab
Table 6-73: Generic ASCII Client Application Tab
Setting Description Range Default
Allow Delayed This parameter enables support for processing Disabled Enabled
Message delayed responses from the devices. With this
Enabled
Processing configuration, distinct “Valid Response Patterns”
must be defined for transactions.
Passthrough This parameter is the same as the pass-through 0 to 3600 seconds 10
response timeout timeout setting, except that it applies to those
times when the pass*through connection is idle
while awaiting a response from the remote
device. In some cases, this time period is
configured to be longer than the default timeout
below because of the additional time required to
process responses to operator commands.
XON_XOFF flow Enable or disable XON/XOFF flow control. True False
control False
RTS_CTS flow Enable or disable RTS/CTS flow control. True False
control False
DTR_DSR Enable or disable DTR/DSR handshaking. True False
handshaking False
Inter Device Delay This parameter specifies the delay time in 0 to 3600 0.01
seconds to wait between consecutive device
polls. (measured from receiving the response for
the last request of one device to the beginning of
first poll of next device)
MCP Redundancy
This chapter consists of the following sections:
About Redundancy
Redundancy Summary
Operational States
MCP Redundancy Configuration Combinations
Configure the MCP for Redundancy
System Points
Non-Sync Mode
Validating the Redundant Connections
Changeover during Standby Start-up
Data Synchronization
Ethernet Connections
Sync Config Operation
HMI User Access Privileges on Redundant System
Redundancy Setup Checklist
Error Messages and Troubleshooting
NOTE:This feature is not supported in G100
About Redundancy
The MCP redundancy implementation uses two MCPs connected through serial and/or network links.
One MCP is in active mode and the other MCP is in standby mode.
If the active unit fails, the standby unit becomes active and takes over system operation.
If ALL communications between the two MCP units fail, the standby unit becomes active. In this situation:
• For systems deployed with a switch panel configured as master:
o The arbitration of which MCP has to be active can no longer be performed correctly and will
result in the standby MCP unit requesting the switch to become active and the previously active
unit becoming failed having the switch pulled away without notice.
• For systems deployed without a switch panel configured as master:
o The arbitration of which MCP has to be active can no longer be performed correctly and will
result in both MCP units becoming active.
Because of this is strongly recommended – if possible – to configure redundant and different types of
communication links between the two MCP units, to eliminate a single point of failure.
Redundancy in the MCP is enabled and disabled using the mcpcfg Configuration Utility/Settings GUI.
Three redundancy modes can be configured:
• Warm Standby Redundancy
Two MCP units are connected using network and/or serial communication links.
Only one MCP unit is active at a time.
Connection to an RS232 switch panel is optional.
Data synchronization from active to standby unit is minimal, restricted to:
• Accumulator running values
• ARRM files (Files which MCP extracted from IED’s)
• Local commands that have been applied to individual system points (control inhibit, scan inhibit, local
force, etc.)
Data is synchronized between the units through the configured inter communication link(s). Initial states are
synchronized when the active unit first begins to communicate with the standby unit. Once this initial
synchronization is complete, individual events are transferred from the active unit to the standby unit as they
occur in real-time.
• Hot Standby Redundancy
Two MCP units are connected using network (mandatory) and optional backup serial communication links.
Only one MCP unit is active at a time.
Connection to an RS232 switch panel is optional.
The two MCP units are kept in constant data synchronization with respect to their real-time databases.
DNP3 (only) communications to master(s) offer a seamless transition during redundancy switch-over.
Not all applications or communication protocols are available in this mode – see Table 1-2: MCP Applications -
Redundancy.
The following data is automatically synchronized from active to standby through the network connection:
• Real time databases
• Events from IEDs
• Hot-Hot Redundancy
Two MCP units are connected using network (mandatory ) and optional backup serial communication links.
Only one MCP unit is active at a time.
Connection to an RS232 switch panel is optional.
The two MCP units are kept in constant data synchronization with respect to their real time databases.
Depending on configured parameters at communication protocol and port level, either:
• Each MCP unit communicates independently and simultaneously with the IEDs (assuming IEDs allow
this), or
• One MCP unit (active) communicates with the IEDs and then synchronizes its data constantly to the other
MCP unit.
DNP3 (only) communications to master(s) offer a seamless transition during redundancy switch-over.
The following data is automatically synchronized from active to standby through the network connection:
• Real time databases
• Events from IEDs
• Alarm and SOE databases
• Local commands that have been applied to individual system points (control inhibit, scan inhibit, local force,
etc.)
• Acknowledgements from the Master station to server application, to delete an event from event queues
• Application internal data to start an application from the same state in the event of change-over.
• Stand-Alone (No Redundancy)
If No Redundancy is configured, then all configured applications in MCP run independently on each MCP.
Note : In Warm-Standby and Hot-Hot Redundancy modes, if D.20 is configured then there will be a default D.20
Heart-beat link available in addition to the configured Redundancy Heart Beat communications . This option is
not available in Hot-Standby Redundancy mode.
Once configured, redundant systems use the MCP Configuration Manager to synchronize configuration between
the two MCP units, ensuring both are configured identically. In addition, the Automated Record Retrieval Manager
(ARRM) provides redundancy support.
Serial connections include the redundancy settings listed in the Redundancy Dedicated Link and Redundancy
Switch Panel sections.
The Redundancy Manager supervises the operational state and state transitions of the MCP units in redundant
mode. See the Operational States and System Points sections for details.
Not all protocols are supported in Hot-Standby Redundancy mode, refer to Table 1-2: MCP
Applications - Redundancy.
Carefully review product documentation and configure Redundancy accordingly.
Redundancy Summary
Table 6-78: Redundancy Summary
Component Warm Standby Redundancy Hot Standby or Hot-Hot Redundancy
MCP Redundancy The MCP Redundancy Manager is The MCP Redundancy Manager is
Manager responsible for managing communications responsible for managing Heart Beat
between the two MCP units and the RS232 communications between the two MCP
Redundancy Switch Panel. It also controls units, and the RS232 switch panel. It also
data synchronization and state changes. controls system state changes.
The MCP Redundancy Manager does not
perform data synchronization from active
unit to standby.
Each application on an active unit directly
communicates to its standby counterpart
for data synchronization.
Redundancy Serial Two serial ports on each MCP are Up to two serial ports on each MCP are
Port Settings dedicated to redundancy-related dedicated to redundancy-related
communications: communications:
Redundancy Dedicated Link - Links the two Redundancy Dedicated Link - Links the two
MCP units together through the ping cable. MCP units together through the ping cable).
This is optional in Warm Standby This is optional in Hot Standby or Hot-Hot
redundancy. redundancy.
Redundancy Switch Panel – Connects each Redundancy Switch Panel – Connects each
MCP unit to the RS232 switch panel MCP unit to the RS232 switch panel
through the watchdog cable. This is through the watchdog cable. This is
optional in Warm Standby redundancy. optional in the Hot Standby or Hot-Hot
redundancy.
MCP Configuration The MCP Configuration Manager allows you to synchronize configurations between two
Manager MCP units. The MCP redundancy application uses this tool to manage the synchronization
of configuration files between the active and standby units to ensure both units are
configured identically.
Gateway The Gateway Configuration Utility is a tool accessed through the command line/settings
Configuration Utility GUI of the MCP. The Redundancy section of this utility is used to configure the parameters
– Redundancy of the redundancy application.
Operational States
The MCP Redundancy Manager supervises the operational state and state transitions of the MCP units in
redundant mode. The following states are possible:
Field Description
Failed The MCP has entered an unrecoverable state and all software functions have been suspended. The
unit must be serviced or restarted to restore functionality.
Service While in service mode, MCP units do not accept change-over requests. The standby unit enters the
Service mode during Sync Config operation and re-initialization.
Non-Sync If the firmware or configuration of the Standby unit is not the same as that of the active unit, the
standby unit enters Non-Sync mode.
In non-sync mode, no application is started on the standby unit. The Redundancy Manager on both
units maintains communications and responds to user commands initiated on the active unit
normally (Configuration Sync, Switch-over, Reboot, etc.). See Non-Sync Mode for more details.
Required configurations
Required configurations
Required configurations
NOTE: Users can configure up to 3x PING separate channels, to provide multiple PING link availability; this
impacts scenario 6 and 9.
Important Notes
• If a user wants to control ACTIVE/STANDBY from the mechanical toggle button of the switch panel,
then the configuration must be 1, 2, 3 (MASTER switch panel in mcpcfg/Settings GUI). And in this
case, the arbitration ACTIVE/STANDBY is done by the switch panel.
• When the switch panel is configured as SLAVE, actions performed on the toggle mechanical button
on the switch panel do not result in changes. This is because in the case SLAVE Mode either
ACTIVE/STANDBY doesn’t get any control from the mechanical toggle button on the switch panel
and the switch panel in this case should not be used as an arbitrator (SLAVE).
• If switch panel is configured as MASTER it is mandatory to configure the switch panel through the
Configuration > Connection tab in the DS Agile Studio.
• It is strongly recommended to use redundant Heart Beat links. This means that scenarios 4, 5, 7, 8
are NOT recommended.
• It is strongly recommended that LAN Heart Beat links be configured on the Net interface that is
connected to the substation LAN, to eliminate the possibility of duplicated ACTIVE IP addresses in
case of both MCP becoming active. This means that a dedicated Net interface for the Heart Beat
link is NOT recommended (if this fails and both MCP become active, they will conduct to duplicated
ACTIVE IP on the substation LAN). This will ensure that one MCP will be isolated from the substation
LAN if the Heart Beat link fails.
Prerequisites
To set up two MCPs for redundant operation, the following is required:
• Two MCPs running same Firmware and Production Build
• The two MCP must be pre-connected as per the valid scenarios in Table 6-80: MCP Redundancy Valid
Configuration Combinations
• Means to change the MCP Settings: Serial Maintenance or SSH client (e.g.: Secure Terminal Emulator
from DS Agile MCP Studio), or KVM set connected to the MCPs, or Web based Settings GUI
NOTE: While the workflows below indicate “mcpcfg” usage, the same steps can be achieved using Settings GUI
equivalent commands.
o Select the required Heart Beat Mechanism by selecting one of the options from the
below menu:
1. Single LAN
2. LAN1 and LAN2
3. LAN and Serial
4. LAN1, LAN2 and Serial
o Enter 1. Single LAN (the default value).
1. Enter Y to save the settings.
o If the option is either 3 or 4, select the required Heart Beat Mechanism, then follow
the below steps to configure the Serial Ports:
1. Navigate to DS Agile MCP Studio -> Connections -> Serial Connections.
2. Add a New connection.
3. Select the Serial Connection.
4. Select the Redundancy Dedicated Link type.
5. Select the Primary and Backup Port settings.
6. Enable the Auto Start configuration parameters.
7. Save and Commit Changes.
6. Navigate back to the Redundancy menu.
7. Enter 4. Configure IP Address of PEER MCP.
• Enter 1. Configure/Update PEER IP Address.
o Enter the new Primary IP Address of the PEER MCP.
o If a Secondary IP for the PEER MCP is available, enter the new Secondary IP Address.
o Confirm the Primary and Secondary IP Address changes by entering Y.
8. Enter 5. Configure Time Sync with Standby. (Optional)
• Skip this option if both MCPs are already in time-sync through other means (for example, IRIG-
B or NTP).
9. Enter 6. Configure Enable/Disable DTAs in Standby.
Result: The Gateway Redundancy Configuration Menu - Enable/Disable DTAs on Standby menu
appears.
• If the “Enable/Disable DTAs in Standby” parameter is set to Enabled, the LogicLinx, Calculator
and Enhanced Automation DTAs run normally on the standby MCP. If this parameter is set to
Disabled, these applications suspend processing on the standby MCP and resume normal
operations when the MCP state becomes active.
• Skip this option if DTA applications (that is, automation applications such as LogicLinx,
Calculator, Enhanced Automation) on the Standby MCP are to run (default option).
10. Enter 7. Configure Gateway A/B Designation.
• If Switch Panel is configured (master), Gateway A/B Designation is read from the Switch Panel
(i.e. user configuration is disabled).
• If Switch Panel is not configured, enter 1. Gateway_A to select the Gateway Designation.
Result: Gateway A/B Designation changed to Gateway_A.
System Points
When running in active mode, the application provides indications through the following digital input system
points:
Field Description
HotstandbyDisabled TRUE if Hot Standby redundancy is disabled, i.e., Warm Standby / Hot-Hot
redundancy is enabled.
FALSE if Hot Standby redundancy is enabled
OFFLINE and INVALID if the MCP is in non-redundant mode
Standby Code Out of Sync FALSE when the firmware on the Primary device is the same as that on the
backup device
TRUE when the firmware on the Primary device is not the same as that on the
backup device
OFFLINE and INVALID if the MCP is in non-redundant mode
NOTE: If a RS232 switch panel is configured, the MCP is designated as unit A or B depending on the input block
it is wired to on the RS232 switch panel. If RS232 switch panel is not configured, designation of both
units must be configured using local Gateway Config Utility (See Redundancy).
The state of both units in redundant configuration is provided through the following analog input system points:
Field Description
SyncConfig Requests that the configuration of the standby MCP be synchronized with that of the
active unit.
OFFLINE and INVALID if the MCP is in non-redundant mode.
NOTE: This operation automatically restarts software (applications) on the standby MCP
to allow applications to take new configuration.
If a change to system configuration is synchronized to the standby MCP, a manual
reboot of standby unit is required. This operation can be performed using the
“RebootStandby” point after SyncConfig operation is over. (See Changeover during
Standby Start-up.)
Standby takes time to initialize and sync initialized data either during start-up or after
changeover. During this time, changeover is not allowed, and a message is logged when
a changeover command is issued. Changeover can be issued only after 180 seconds in
case of standby start-up. A second changeover can be issued only after 30 seconds of
the first changeover.
ShutdownActive Requests shutdown of active MCP.
NOTE: This DO should be used to shutdown active MCP gracefully before powering it
off. This prevents data corruption on SSD.
ShutdownStandby Requests shutdown of standby MCP.
OFFLINE and INVALID if the MCP is in non-redundant mode.
NOTE: This DO should be used to shutdown standby MCP gracefully before powering it
off. This prevents data corruption on SSD.
You may issue any control operation on these points to initiate the request associated with the point. Upon
receiving a control operation, the Redundancy Manager momentarily changes the state of the digital output to
ON then OFF.
All local commands on indication and control points are rejected.
Non-Sync Mode
If the firmware or configuration of the standby unit is not the same as that of the active unit, the standby unit
enters non-sync mode at start up.
Non-Sync Mode is only applicable to Hot-Standby and Hot-Hot Redundancy.
The Standby Config Out of Sync digital input point indicates if the configuration on the standby unit does not
match with the active unit.
The Code Out of Sync digital input point indicates if the firmware on the standby unit does not match with the
active unit.
In non-sync mode, no application is started on the standby unit. The Redundancy Manager on both units
maintains communications and responds to user commands initiated on the active unit normally (Sync Config,
Change-over, Reboot Active, Reboot Standby, Restart Active, Restart Standby, Shutdown Active, and Shutdown
Standby).
The non-sync mode of standby unit can be disabled using MCP Config Utility (see Enable/Disable Non-Sync
mode).
If change-over operation is performed while the standby unit is in non-sync mode, the standby
unit changes to active, and the active unit enters non-sync mode.
6. Select the Digital Output tab and verify that all points are online and have a value of zero.
If the Active MCP device fails while Standby MCP is initializing (i.e. “StandbyGatewayNotAvailable” Digital Input
point is still at ‘1’ in the Active MCP, when the fail-over happens) - then after fail-over to Standby, all the
applications in the Standby are restarted and entered into the Active state. This is because when the fail-over
happens, the Standby initialization has not completed yet and hence the applications re-initialize before
proceeding to the Active state.
Ethernet Connections
When you configure a pair of MCPs for redundancy, you need at least 3 IP Addresses for the two MCPs:
• One unique (adapter) IP Address for each MCP
• One “active” IP Address to be used by the active MCP
• Optional: One “alias” IP Address to be used as an alternate to active MCP.
The same “active” IP Address is configured in both MCPs. When a MCP is in active mode, it uses the configured
“active” IP Address. In any other state, it uses its own unique adapter IP Address. This allows external devices and
master stations to use only one IP Address to access the pair of MCPs.
IP Address Combinations
Table 6-84: IP Address Combinations
NOTE: Having both MCPs active at the same time can only be achieved if the two units are not reachable to each
other via configured Heart Beat communication links. In any other scenario, the two units successfully arbitrate
so that only one MCP claims the active IP Address.
This scheme requires static IP Address configuration. The MCP Redundancy solution does not support use of a
DHCP server to assign dynamic IP Addresses.
If the MCPs have a Secondary Ethernet interface installed, a second set of 3 IP Addresses is assigned to that
interface, using the same rules.
The MCP Redundancy services use 51000 and 51001 TCP ports for Heart Beat communication, data and
configuration synchronization. If the two MCPs are connected through an external firewall, then inbound and
outbound traffic should be allowed for 51000 and 51001 TCP ports in the external firewall.
Do not change the configuration of the active MCP while configuration synchronization is in
progress. Changing the configuration of the active MCP may result in a configuration mismatch or
configuration corruption.
Task Reference
8. If the Standby Config Out of Sync point has a value MCP Redundancy Manager
of 1, initiate configuration sync from the active unit by
Changeover during Standby Start-up
executing a control command on the SyncConfig
pseudo output point of the Redundancy Manager Standby takes time to initialize and sync initialized data
application. either during start-up or after changeover. During this
time, changeover is not allowed, and a message is
After the sync operation, verify that the Standby Config
logged when a changeover command is issued.
Out of Sync point has a value of 0.
Changeover can be issued only after 180 seconds in
case of standby start-up. A second changeover can be
issued only after 30 seconds of the first changeover.
Sync Config Operation
Task Reference
8. If a switch panel is configured, configure the Redundancy Switch Panel
Redundancy Switch Panel serial connections on the
Redundancy
Configuration > Connection page of the DSAS
Configuration. G500 Substation Gateway Instruction Manual (GE part
no. 994-0152) or G100 Substation Gateway Instruction
If a switch panel is not configured, designate one MCP
Manual (994-0155) > Configure Gateway A/B
as “A”, and other as “B” using mcpcfg/Settings GUI.
Designation
NOTE: The user must reboot the MCP units after
completing steps 1 to 8.
9. Validate the redundant connection to ensure that To validate a redundant system
the system has been fully configured.
10. If the Standby Config Out of Sync point has a value MCP Redundancy Manager
of 1, initiate configuration sync from the active unit by
Changeover during Standby Start-up
executing a control command on the SyncConfig
pseudo output point of the Redundancy Manager Standby takes time to initialize and sync initialized data
application. either during start-up or after changeover. During this
time, changeover is not allowed, and a message is
After the sync operation, verify that the Standby Config
logged when a changeover command is issued.
Out of Sync point has a value of 0.
Changeover can be issued only after 180 seconds in
case of standby start-up. A second changeover can be
issued only after 30 seconds of the first changeover.
Sync Config Operation
Common Tables
Serial
Diagnostic Log Messages Details
Number
10 [ACTIVE]: Tool task failed with error = Configuration synchronization failed because the standby unit
<error code> issued an error. Review the <error code> in the table of
Configuration Manager error codes.
11 [ACTIVE]: CONFIG SYNC failed due to Configuration synchronization failed because the Configuration
tool task timeout Manager software failed to respond.
12 [ACTIVE]: Standby MCP rejected the The standby unit rejected a request to synchronize either quality
DB Sync start request with reason or accumulator data. The <reason code> is identified by a
<reason code> technical number. See Redundancy_Manager_Reason_Codes
for the technical number (reason code) descriptions.
The most common cause is that the standby unit is in service
mode or has failed.
13 [ACTIVE]: Standby MCP failed in DB Synchronization of either quality or accumulator tables failed to
sync in network mode complete. The most common cause is that either
communications with the standby unit have been interrupted,
or the standby is in service mode or has failed.
14 [ACTIVE]: Response timeout for The standby unit failed to send a response to the active unit. The
activity <activity type> subactivity numeric codes define the activity that timed out. This is a
<subactivity type> diagnostic message that only needs to be considered if there
are messages indicating that something has failed.
15 Configuration read failed: Entering Check Redundancy serial ports or switch panel are not
Active Non-Redundant mode configured in the connection configuration of the MCP.
16 Redundancy is DISABLED: Entering Diagnostic message only. Redundancy is disabled in the
Active Non-Redundant mode configuration.
17 Failed to open switch panel port: This message indicates a software failure of the MCP. Either the
Entering Active Non-Redundant configuration files of the MCP have been corrupted or the MCP
mode has not started properly.
18 Failed to open Heart Beat port: This message indicates a software failure of the MCP. Either the
Entering Active Non-Redundant configuration files of the MCP have been corrupted or the MCP
mode has not started properly.
19 Error in reading switch panel: This message indicates a software failure of the MCP. Either the
Entering Active Non-Redundant configuration files of the MCP have been corrupted or the MCP
mode has not started properly.
20 Failed to receive initial HB from PEER The active MCP never sent a Heart Beat message to the
MCP: Entering Active mode standby, causing the standby unit to become active. Check that
the active unit is functional and that the HB communication link
between the two units is properly installed.
21 STATE CONFLICT: This MCP = ACTIVE Check the wiring of the MCP units to the switch panel
and A, PEER MCP = ACTIVE and A
Failing this MCP
22 STATE CONFLICT: This MCP = ACTIVE Check the wiring of the MCP units to the switch panel
and A, PEER MCP = ACTIVE and B
PEER MCP should fail
Serial
Diagnostic Log Messages Details
Number
23 STATE CONFLICT: This MCP = ACTIVE Check the wiring of the MCP units to the switch panel
and B, PEER MCP = ACTIVE
Failing this (B) MCP
24 STATE CONFLICT: This MCP = Check the wiring of the MCP units to the switch panel
STANDBY and A, PEER MCP =
STANDBY and A
Failing this (B) MCP
25 STATE CONFLICT: This MCP = Check the wiring of the MCP units to the switch panel. This could
STANDBY and B, PEER MCP = also be loss of power to the switch panel, as a powered-down
STANDBY switch panel reads as “standby” and “B” to the MCP.
Failing this (B) MCP
26 [STANDBY]: Failed to pull the switch, The MCP could not pull the switch. Check the wiring of the MCP
Rejecting Change Over request units to the switch panel. This could also be loss of power to the
switch panel.
27 [STANDBY]: Config Sync failed in The standby MCP unit failed to commit its transferred
network mode while copying configuration into the flash card. The flash card may be full, or
configuration to /mnt/usr/ someone may have changed the write permissions on the card.
The standby configuration may be partially copied and
unusable.
28 [STANDBY]: Config Sync failed in local Configuration synchronization failed while transferring
mode due to tool task failure configuration data. The standby unit uses its original
configuration.
29 [STANDBY]: Config Sync failed in local The standby MCP unit failed to commit its transferred
mode while copying configuration to configuration into the flash card. The flash card may be full, or
/mnt/usr/ someone may have changed the write permissions on the card.
The standby configuration may be partially copied and
unusable.
30 [STANDBY]: CONFIG SYNC Activity: Configuration synchronization failed while transferring
Tool task timeout in mode <tool task configuration data. The standby unit uses its original
mode> configuration.
31 [STANDBY]: CONFIG SYNC Activity: The active unit failed to send a response during configuration
Response timeout sync activity. The active unit may be experiencing problems, or
the communication link between the two units may be
disconnected. The standby configuration may be partially
copied and unusable.
32 Response timeout in DB SYNC The standby unit failed to send a response while synchronizing
Activity quality or accumulator data. The data on the standby unit may
not be up to date. The standby unit may be experiencing
problems or the communication link between the two units may
be disconnected.
33 [ACTIVE]: Config check completed: The configuration is the same on both active and standby units.
Configuration is same
Serial
Diagnostic Log Messages Details
Number
34 [STANDBY]: Response timeout for The standby unit failed to send a response to the active unit. The
activity <activity type> subactivity numeric codes define the activity that timed out. This is a
<subactivity type> diagnostic message that only needs to be considered if there
are messages indicating that something has failed.
35 [ACTIVE]: Switch pulled away: PEER Switch pulled manually when the standby unit is not available.
MCP is failed, Failing this MCP The standby unit may have failed or the communication link
between the two units may be disconnected.
36 [ACTIVE]: Switch pulled away: Switch pulled manually when the standby unit is in service
Rejecting CHANGE OVER since Other mode. The active unit rejects the command to switch over.
MCP is in Service Mode
37 [ACTIVE]: RACE Condition for switch: Switch was pulled in the last 1000 ms.
Failing this (B) MCP
38 [ACTIVE]: Standby MCP rejected the The standby unit rejected a request to update code and config
code config request with reason check values. The <reason code> is identified by a technical
<reason code> number. See the Redundancy_Manager_Reason_Codes for the
technical number (reason code) descriptions.
The most common cause is that the standby unit is in service
mode or has failed.
39 [ACTIVE]: No Change Over Event The active redundancy manager does not receive a change-
Resp from <no of applications> over event response from the indicated number of applications.
applications. Change Over Timeout
40 failed to open code_config_check A MCP has failed due to a software failure. Either the ssh keys
file are not synced, or the MCP has not started properly.
41 failed to read code_config_check file A MCP has failed due to a software failure. The MCP has not
started properly.
42 failed to update code config info <file A MCP has failed due to a software failure. The MCP has not
name> started properly.
43 redun manager update fifo creation A MCP has failed due to a software failure. The MCP has not
failed with reason <error code> started properly.
44 Failed to write active->standby A MCP has failed due to a software failure. The MCP has not
trigger message to main thread fifo started properly.
45 Failed to read message from redun A MCP has failed due to a software failure. The MCP has not
manager update FIFO started properly.
46 [ACTIVE] Failed to read state of Check the:
switch panel (master), Failing MCP
Switch panel port configuration.
Wiring of the MCP units to the switch panel.
Availability of power to the switch panel.
47 [Active] Failed to read state of switch Check the:
panel (slave), Ignoring error
Switch panel port configuration.
Wiring of the MCP units to the switch panel.
Availability of power to the switch panel.
Serial
Diagnostic Log Messages Details
Number
48 [Active] failed to pull master switch Check the:
panel towards itself, Failing MCP
Switch panel port configuration.
Wiring of the MCP units to the switch panel.
Availability of power to the switch panel.
49 [Active] failed to pull slave switch Check the:
panel towards itself, Ignoring
Switch panel port configuration.
Wiring of the MCP units to the switch panel.
Availability of power to the switch panel.
50 [PRP] Failed to recv msg from PEER Possibly a partial message has been received on channel
MCP on Channel <channel no> <channel no>
51 Failed to write standby->active A MCP has failed due to a software failure. The MCP has not
trigger message to main thread fifo started properly.
52 bind () call failed. Error [<error code>], There could be more than one instance of Redundancy
Restarting applications on this MCP manager running at the same time.
53 MCP DESIGNATION CONFLICT. BOTH Both MCPs have either Gateway_A or Gateway_B designation.
MCPs are <gateway name>. Failing Check mcpcfg for the MCP designation or switch panel
this MCP. configuration on both MCPs.
54 STATE CONFLICT. BOTH MCPs are Both MCPs are in the active state. This could be due to either:
ACTIVE
Heart beat communication link is available after a brief
failure or
Switch panel configuration mismatch
55 STATE CONFLICT. BOTH MCPs are Both MCPs are in the active state. This could be due to either:
ACTIVE. Restarting this MCP
Heart beat communication link is available after a brief
failure or
Switch panel configuration mismatch
56 STATE CONFLICT. BOTH MCPs are Both MCPs are in the active state.
STANDBY. Restarting this MCP
This could be due to a switch panel configuration mismatch.
57 TCP client connection from <IP This indicates a third MCP or another device, which is not
Address> is not matching with configured as PEER, is attempting to connect to this MCP.
configured PEER ip. Rejecting Subsequently, the connection is closed. Check the configuration
connection using mcpcfg/Settings GUI configuration tool.
58 Failed to get pseudo points from The RTDB Pseudo points file became corrupted. To recover from
pseudo map file Err:-98 this situation, issue the following command from the MCP
console and then reboot:
‘cp
/home/Configure/SystemConfig/RTDBPseudoPoints.xml.default
/home/Configure/SystemConfig/RTDBPseudoPoints.xml’
The following table describes the possible system event messages displayed by the MCP Redundancy Manager.
These messages are entered in the system event log of the MCP. These are notifications of significant events, not
necessarily errors. If it indicates an error or failure, consult the diagnostic log for details.
5 Sent message to SWWatchdog to stop all apps The MCP is being placed in failed mode.
6 Received HB from standby A lost connection with the standby has been
restored.
7 Child starts Redundancy Manager child started
8 Appl starts Redundancy Manager application started
9 MCP Started in Non-Redundant Mode
10 Heart Beat(s) missed from Standby system: The standby MCP has stopped responding to
Declaring PEER MCP as Failed communications.
11 Heart Beat(s) missed from Active system: The active MCP has stopped responding to
Declaring PEER MCP as Failed communications.
12 MCP Started in Standby Mode
Serial
System Event Log Messages Details
Number
4 ERROR: State Returned is Hot Redundancy is configured but System State is
ActiveNonRedundant, Not Starting ActiveNonRedundant.
SyncService Thread
Sync operation with standby unit is not performed.
5 Shared Memory Creation Failed with Error A software failure has occurred on the MCP.
(errorCode)
Either the MCP is running out of memory or the MCP
has not started properly.
6 Shared Memory Registration Failed with A software failure has occurred on the MCP.
Error (errorCode)
Either the MCP is running out of memory or the MCP
has not started properly.
7 RingBuffer Creation Failed A software failure has occurred on the MCP.
Either the MCP is running out of memory or the MCP
has not started properly.
8 SyncService RingBuffer OverFlow, Setting The application buffer has overflowed.
OverFlow Flag
The Standby unit may lose some events.
9 Detected RingBuffer OverFlow, Starting Starting Initial Synchronization with Standby unit.
Complete Init
10 DeleteDataPacket: Invalid EntryID passed: Duplicate data has been received from Standby
(Packet entryID) MCP.
This can occur during channel switching or change-
over. Does not affect normal operation.
11 Starting UDS Server Channel Failed with A software failure has occurred on the MCP.
RetVal: (errorCode)
Either the MCP is running out of memory or the MCP
has not started properly.
12 Connection Timeout, Closing Current The Heart Beat is missing from the Active MCP.
Active Channel: (activeChannel) Check the TCP communication between the MCPs.
13 Applications Restart on Active/Standby, Applications start on Active/Standby. Starting initial
Doing Complete INIT newPPID: (standby synchronization with Standby unit.
parent process ID), oldPPID: (Standby Old
parent process ID)
14 Child Restart on Standby Standby Application child was restarted.
15 No OverFlow: Skipping INIT upon channel Channel Reconnection, no buffer overflow observed
reconnection, Last acked EntryID: (entryID) on Active unit. Does not affect normal operation.
16 ERROR: StartFileTransfer: File Stat Failed A software failure has occurred on the MCP.
Either the MCP is running out of memory or the MCP
has not started properly.
Communications
This chapter contains the following sections and sub-sections:
Connection
Configure Serial Communications
Types of Serial Connections
Add a Serial Connection
Modify a Serial Connection
Delete a Serial Connection
Connection Application Parameters
Port Settings
Virtual Serial Ports
Connection Security
Redundancy Dedicated Link
Redundancy Switch Panels
Terminal Server
Configure Network Communications
Types of Network Connections
Add a Network Connection
Modify a Network Connection
Delete a Network Connection
Connection Application Parameters
SSH TCP Tunnel
Secure Connection Relay
VPN Server
Configure D.20
D.20 Peripheral Mapfiles
Configuring Peripheral Map files
D.20 Peripheral Link Client Pseudo Points
Connection
You can configure serial and network communication connections in the MCP on the Connection tab of the
Configuration page.
The following related actions can be performed:
Add a serial connection
Modify a serial connection
Delete a serial connection
Add a network connection
Modify a network connection
Delete a network connection
Redundant Communications
Communications that take place over a serial connection can be configured for redundancy by setting up two
serial ports – a Primary port and a Secondary (back up) port. Communications normally take place over the
Primary port. In the event of a loss of communication with the device over the Primary port, the MCP tries to re-
establish communication over the Secondary port. If the MCP cannot re-establish communication over the
backup port it reports the device status as offline.
Multi-Drop
Some devices support a daisy-chain connection in which multiple devices are wired together from one to the
other. A multi-drop configuration requires additional configuration to set up each individual device on a multi-
drop connection.
SCADA Communications
The MCP supports serial connections to SCADA masters through up to eight serial ports. Each serial port can be
assigned a single SCADA protocol (server application) for master station communications. The MCP currently
supports serial master communications using the following server protocols:
• DNP server
• Modbus
• IEC 60870-5-101
Protocols
Serial connections can be configured using the following protocols.
• DNP3 Master Stations
• DNP3 Multi-drop
• LogicLinx Device
• Modbus Master Stations
• Modbus Multi-drop
• Redundancy Dedicated Link – not supported in G100
• Generic ASCII
• SEL Binary with MCP as Master
• Terminal Server
configuration page, and the System Point Manager. Mappings affected by this are referred to as being
"non-existent". Editing an existing map file does not invalidate mappings.
2. Under Application Parameters. select Use Default and then click Show.
Result: The Application Parameters window opens.
Port Settings
The following settings are required for each connection; they define how the MCP communicates over the serial
link. Some settings may not be available for all connection types.
Table 6-92: Port Settings
Setting Description Range Default
Primary Port For G500: For G500: Increment
Primary serial port for device communications with the 1-8, A1-A4, B1-B4 from 1 –
MCP. Ports 1-8, A1-A4, B1-B4 and C1-C4 refer to and C1-C4 Physical
Physical Serial Ports and ports VP1 through VP150 refer Physical Serial Serial Ports
to Virtual Serial Ports. Ports Incremented
VP1 -VP150 – from VP1 –
For G100: Virtual Serial Ports Virtual Serial
Primary serial port for device communications with the Ports
G100. Ports 1-4 refer to Physical Serial Ports and ports For G100:
VP1 through VP150 refer to Virtual Serial Ports. 1-4 - Physical
Serial Ports
VP1 - VP150 –
Virtual Serial Ports
Backup Port For G500: For G500: NA
Secondary port for device communications if the 1-8, A1-A4, B1-B4
Primary port fails. The Backup port automatically takes and C1-C4
on the settings of the associated Primary port. Ports 1- Physical Serial
8, A1-A4, B1-B4 and C1-C4 refer to Physical Serial Ports Ports
and ports VP1 through VP150 refer to Virtual Serial
Ports. VP1 -VP150 –
Virtual Serial Ports
For G100:
Secondary port for device communications if the For G100:
Primary port fails. The Backup port automatically takes 1-4 - Physical
on the settings of the associated Primary port. Ports 1- Serial Ports
4 refer to Physical Serial Ports and ports VP1 through
VP150 refer to Virtual Serial Ports. VP1 - VP150 –
Virtual Serial Ports
Baud Rate The speed of information being transmitted across the List of baud rates 9600
serial connection, in bits per second (bps). (110 to 115200)
Parity A bit added to a group of bits to detect the presence of Even None
an error. None
Odd
Data Bits Number of bits used for each character. 7, 8 8
Stop Bits Number of bits used to indicate the end of each 1, 2 1
character as it is transmitted.
Connection Security
The MCP supports Transport Layer Security (TLS) which is cryptographic protocol that provide security for
communications over networks such as the Internet. TLS encrypt the segments of network connections at the
Application Layer to ensure secure end-to-end transit at the Transport Layer.
This security feature is available on the following types of connections:
• IEC 60870-5-103 Multi-drop
• Modbus Multi-drop
• Generic ASCII
It is strongly recommended that TLS tunnels or SSH Tunnels are used for sessions
across unprotected / external networks.
The user assumes all responsibility for the system design and associated security
risks when unsecured sessions are used, for e.g. Telnet.
The following parameters can be configured on any security-enabled connection.
Terminal Server
The MCP can be configured to provide transparent access (also known as pass-through) to connected devices
using vendor-supplied PC programs. This is done by configuring the port the device is connected to as a Terminal
Server.
Refer to Pass-Through Connections for more information.
The following settings are used when configuring a Terminal Server.
Table 6-101: Terminal Server Settings
Setting Description Range Default
Device Name Text description to identify the terminal server. 1 to 32 ASCII characters N/A
Auto Start Indicates if the client application automatically Disabled Disabled
starts when the configuration is changed and Enabled
reloaded or when the MCP re-boots.
Secure Type Select a security feature to be enabled on the Disabled Disabled
connection. For more information, refer to Telnet
Connection Security. TLS Security
SSH Secure Tunnel
TLS port Enter the port number that can be used to access 1 to 65535 50000 + X
the secure connection.
File Select the security parameters defining this List of saved security N/A
connection. After a configuration can be created, settings
it can be saved and reused on other connections.
Refer to Secure Application Parameters.
Network Blocks
To improve the efficiency of communications, the MCP supports network capable device and master connections
using “blocks” that can process communications concurrently. Each network block is an instance of a designated
protocol (client or server application).
Each network block can be configured for the number of device (client) or master station (server) connections
and instance-specific protocol settings that are used for the network communications. Network blocks appear
under the Network Connections heading of the Connection tab as <Protocol Name> Blocks.
Tip: Each additional instance uses additional system resources yet increases system throughput.
Network Devices
Network capable devices can be connected to one or more data collection blocks and polled according to the
instance-specific protocol settings.
Master Connections
The MCP can support communications to multiple (up to eight) master stations. The data presented to each
master station may be identical or unique as defined by a server map. Although the MCP accepts data requests
from only one master station at a time, it can support requests from any master station. A single Master block
defines the master station connections.
The Master Block tab on the Network tab includes a tab for each configured server application. Each row on the
Master Connection page represents one master connection.
A master station represents a single instance of a server application. Each configured master station application
is shown as a sub-item underneath the Network Master Stations item on the Connection tab.
Protocols
You can configure network connections using the following protocols:
• DNP IED Block
• DNP3 Master
• IEC 60870-5-104 IED Block
• SNMP Block
• VPN Server
NOTE: IEC 61850 device connections are available for viewing only and cannot be edited on the Network page.
To change the IEC 61850 client configuration, you must use the IEC 61850 Loader tool and re-load the
configuration into the MCP. Refer to the IEC 61850 Loader online Help for more information.
It is strongly recommended that the user employ TLS tunnels to protect the
- SECURITY NOTICE following services:
• DNP3 Master
• IEC 60870-5-104 Master Station
• Modbus TCP Master
The user assumes all responsibility for associated security risks when enabling
unsecured services onto an unprotected network.
The following settings are used when configuring a secure connection relay.
Table 6-104: Secure Connection Relay settings
Setting Description Range Default
Secure Relay Text description to identify the connection. 1 to 32 ASCII N/A
Name characters
Auto Start Indicates if the application automatically starts Disabled Enabled
when the configuration is changed and reloaded Enabled
or when the MCP re-boots.
Remote IP Address The IP Address of the remote device that the Valid IPv4 address 0.0.0.0
secure connection is established with.
LAN port The IP port number to use when connecting to 1 to 65535 20001
the remote device.
TLS port Enter the port number that can be used to access 1 to 65535 50000 + X
the secure connection.
VPN Server
The following settings are used when configuring a VPN Server through DS Agile MCP Studio.
NOTE:Refer to the Integration of MCP with open VPN (Virtual Private Network) Client - Configuration Guide
(SWM0103) for the detailed procedures used to:
• Implement a simple Certification Authority using XCA Certification Authority (Open Source tool).
• Install certificates on the MCP and Windows PC running open VPN client.
• Configure open VPN client to communicate to the MCP over virtual private network.
Table 6-105: VPN Server settings
Setting Description Range Default
Name Unique name for the VPN Server. Text string VPN
32 characters are allowed Server
Auto Start Indicates if the application automatically Disabled Enabled
starts when the configuration is changed Enabled
and reloaded or when the MCP re-boots.
Network IP IP Address of the device. Must be unique Valid IPv4 address 10.200.0.0
Address from other configured devices. /24
Port The port number on which the device 0 to 65535 1,194
communicates.
Concurrent The number of allowed concurrent 1, 2, 3 1
Connections connections.
Transport Layer The transport layer protocol; either: TCP UDP
• Transmission Control Protocol (TCP), or UDP
Configure D.20
The D.20 Subsystem is responsible for:
• Monitor and maintain the code and configuration of every D.20 peripheral in the connected network.
• Present all hardware inputs and outputs provided by the D.20 peripherals as discrete system points of
the appropriate data type in the Real Time Database (RTDB) of MCP.
• Send output commands on analog and digital output system points received via the RTDB to the
peripheral output associated with the affect system point.
• Monitor the health of each D.20 peripheral in the network and report any issues to the user.
Pre-requisites:
Computer with DSAS and both MCP Studio and D2X Studio installed.
D20 RTU archive / device configuration.
5. Follow the prompts and select the D20 RTU from Step 3. Click Next, and on next page click Finish.
6. Result: the D.20 configuration has been copied into the MCP.
7. Click Save / Commit. The MCP device can now talk to the D.20 IO modules same as the D20 RTU was
able to do.
Note:
The imported data will be automatically named based on the source D20 RTU configuration, as following:
Each imported D.20 IO module will have its own D.20 client map file, automatically named based on the following
naming convention, to be easily cross referenced with the original D20 RTU IO configuration, based on imported
data from D20 RTU:
Block_A is always present and associates with the D20 block of IO imported in the MCP; this is a.
{type}_Peripheral #}_{Peripheral Hex Address}
Application Parameters
The Application Parameters tab allows you to view and modify the protocol settings for a specific client
connection. Application parameters are available on the Connection tab on the Configuration page.
4. To modify a parameter, double-click the associated value and enter a new value or select from the
drop-down list.
5. When you are done, click Save.
6. On the Save As window, enter a filename and click Save.
7. Click Save Configuration to save your changes.
Configuration Parameters
Setting Description Range Default
Auto Start Indicates if the client application automatically Disabled Disabled
starts when the configuration is changed and Enabled
reloaded or when the MCP re-boots.
Redundancy This option differs in the way the peripherals are "Single Link" Single Link
connected physically to MCP.
“Redundant Links”
Address The automatically generated peripheral address, Even / Odd Even
Parity which is based upon the jumpers settings on
peripherals, where the top jumper setting is for the
Use the Copy and Paste options to copy the point details into the Excel sheet. Select the point details
which needs to be copied and click copy icon and copy them into the excel sheet. Modify the point details
in the excel sheet and copy them from the excel sheet and click paste icon to import the point details
content from Excel.
NOTE: If you enter a value that is out of range, DSAS will show a warning and automatically insert the lowest or
highest value that it can accept as appropriate.
» To configure the MCP to communicate with devices, perform the following typical tasks:
1. Create MCP client map file for each device and protocol type.
2. Define the data points list and set point properties.
3. Set protocol-specific properties.
4. Set up serial and network device connections.
5. Configure protocol-specific settings for each device connection.
6. Save the configuration file.
7. Run the configuration file in the MCP by committing the changes.
DNP3 Multi-drop
The following settings are used when configuring a DNP3 Multi-drop connection. If a Modem connection is used,
refer to the additional settings defined in Dial-up Modem Settings.
IED Address Protocol address of the device (i.e. DNP3 device address). 0 to 65519 X
This parameter is applicable for Standalone/Warm-
Standby/Hot-Standby devices .
IED Address A Protocol address of the device A (i.e. DNP3 device A 0 to 65519 X
address) devices .
This parameter is applicable only for Hot-Hot devices.
IED Address B Protocol address of the device B (i.e. DNP3 device B 0 to 65519 X
address)
This parameter is applicable only for Hot-Hot devices.
Map File Name of the Client map file to be used with the specific
List of users N/A
device. configured client map
files.
Enable on Start Indicates if communication to the device automatically Disabled Disabled
Up starts when the configuration is changed and reloaded Enabled
or when the MCP re-boots.
Modbus Multi-drop
The following settings are used when configuring a Modbus Multi-drop connection.
Table 6-117: Modbus Multi-drop Settings
Setting Description Range Default
Auto Start Indicates if the client application automatically starts Disabled Disabled
when the configuration is changed and reloaded or Enabled
when the MCP re-boots.
Secure Type Select a security feature to be enabled on the Disabled Disabled
connection. For more information, refer to Connection Telnet
Security. TLS Security
SSH Secure Tunnel
TLS port Enter the port number that can be used to access the 1 to 65535 50000 + X
secure connection.
File Select the security parameters defining this connection. List of saved security N/A
After a configuration can be created, it can be saved settings
and reused on other connections. Refer to Secure
Application Parameters.
Line ID Text description to identify the electrical transmission 1 to 64 ASCII Line X
line associated with this serial connection. characters
Device ID Text description to identify the device associated with 1 to 63 ASCII Device X
this serial connection. characters
Bay ID Text description to identify the bay area associated with 1 to 256 ASCII Bay X
this serial connection. characters
IED Address Protocol address of the device (i.e. Modbus device 1 X
address) to 254
This parameter is applicable for Standalone/Warm-
Standby/Hot-Standby devices .
IED Address A Protocol address of the device A (i.e. Modbus device A 1 X
address). to 254
This parameter is applicable only for Hot-Hot devices.
IED Address B Protocol address of the device B (i.e. Modbus device B 1 X
address). to 254
This parameter is applicable only for Hot-Hot devices.
Map File Name of the Client map file to be used with the specific List of users N/A
device. configured client map
files.
Enable on Start Indicates if communication to the device automatically Disabled Disabled
Up starts when the configuration is changed and reloaded Enabled
or when the MCP re-boots.
SEL Binary
The Schweitzer Engineering Laboratories (SEL) Binary protocol supports the exchange of information with SEL
Fast Meter metering and relay devices over a serial link. It also supports pass through connection to the device.
SEL Binary
The following settings are used when configuring a SEL Binary connection.
Terminal emulation settings should be set to CR (carriage return) for <ENTER>.
For example:
• Secure Terminal Emulator from DS Agile MCP Studio, by default sends/receives LF (linefeed) on
<ENTER>
• Secure Terminal Emulator serial mode by default sends/receives CR on <ENTER>
• Hyper Terminal, by default sends/receives LF on <ENTER>
LogicLinx Device
A LogicLinx Device connection is used to define a communications link between the LogicLinx application running
on the MCP and a PC running the LogicLinx Editor.
Once assigned, the connection appears with port details.
SNMP Block
SNMP, or Simple Network Management Protocol, is primarily used in network management systems to monitor
network-attached devices for conditions that warrant administrative attention. The MCP can be configured to
receive SNMP messages on a polled or unsolicited basis.
ARRM Configuration
The Automated Record Retrieval Manager retrieves and stores from devices connected to your MCP. Examples
of files are: Oscillography COMTRADE, SOE logs, Events, Generic data, Information about the IED, IEC 61850 SCL
files (IID). The ARRM configuration page allows you to configure the ARRM application.
The configuration page is split into two tabs: Applications (stations, devices, and file sets), and File Set Template
(parameters for retrieving files from different types of devices).
ARRM Viewer
The ARRM Viewer page is divided into several areas.
Screen Areas
The ARRM Viewer window is comprised of several areas.
Table 6-123: ARRM Viewer - Screen Area
Upper right pane - The upper right pane shows a tabular listing of devices in your network, including device
Device view status and file retrieval status. Selecting a station or device in the left pane filters the grid
to only show the selected entries.
Per-Application
Table 6-124: ARRM Pseudo Points - Per Application
Per-File Set
Table 6-125: ARRM Pseudo Points - Per File Set
Enable Connection The digital output pseudo point can be used to disable or enable inclusion of the file set
Polling into connection polling.
The Latch On, Pulse On, or Close states enable inclusion of file set into connection polling.
The Latch Off, Pulse Off, or Trip states disable inclusion of file set into connection polling.
The status of file set inclusion into connection polling is reported with the Connection
Polling Enabled digital input pseudo point.
Connection Polling This digital input pseudo point is set to:
Enabled ➢ 1 when file set inclusion into connection polling is enabled
➢ 0 when file set inclusion into connection polling is disabled.
File set inclusion into connection polling can be enabled or disabled using the Enable
Connection Polling digital output pseudo point.
Enterprise Synchronization
See the following sections for details:
ARRM Overview
Configure ARRM
Configure Applications
Configure File Set Templates
ARRM Viewer
ARRM Pseudo Points
About Oscillography Files and IEEE File Naming Convention for Time Sequence Data
Applications - ARRM
The Applications tab of the ARRM configuration window allows you to configure stations, devices, and file sets
to be retrieved by the ARRM application.
Click the button to delete the selected station, device, or file set.
Field Description
Company Name The name of the company that is saved to the oscillography data filename. Range is 1
to 32 alphanumeric characters.
MCP Gateway Name The name of the MCP Gateway that is included in the ARRM Connection Status File.
Range is 1 to 32 alphanumeric characters. Refer to the Connection Polling section for
more details.
Maximum Num of Enter the number of files that can be retrieved at the same time. This setting is useful in
Concurrent Retrievals reducing the load that ARRM places on poor networks or networks with many devices.
Range is 1 to 256, default is 10. NOTE: Queued file retrievals are initiated at the
TFTP/FTP/SFTP retry interval. For example, if you have set the TFTP/FTP/SFTP retry
interval to five minutes and have set the number of concurrent file retrievals to 10, ARRM
attempts to download 10 files every five minutes.
Considering that retrieved files will likely not be examined in real time, it is not
recommended to exceed 20 concurrent file retrieval sessions to accelerate the
transfers.
File Deletion Threshold The amount of space, in MB, allocated for use by ARRM. When this limit is reached, ARRM
deletes older files as needed. Range is 1 to 65535, default is 512.
Default Time Tag Select whether stations belonging to this company apply a time tag based on first
Reference sample or time trigger. Stations can be configured to override this setting on a case-by-
case basis.
Create Station Select whether to create a separate folder within the storage folders for each station. If
Subdirectories this setting is not enabled, all device directories are stored within the root folder.
Create Device Select whether to create a separate folder within the storage folders (and, if selected,
Subdirectories the station subfolder) for each device.
NOTE: It is recommended that the creation of Station and Device Subdirectories be enabled when using non-
IEEE file naming, to prevent mixing different Substations and IEDs files in the same folder. This is also
required for correct file structuring when pushing the files to Enterprise systems.
Field Description
Retries The number of times ARRM is to retry a file transfer that has timed-out.
Valid range is 0 to 10 times.
Default is 2 times.
Field Description
Retry Interval If there is a network error, ARRM retries the file retrieval at a configured interval. Enter the
amount of time, in seconds, that ARRM must wait before retrying a file transfer that has failed.
Valid range is 1 to 86400.
Default is 5.
Station
Table 6-128: ARRM - Station
Field Description
Station Name The name of the station that is saved to the oscillography data filename.
Valid range is a name that is between 1 and 6 characters in length and must be unique
from any other configured station name.
Default text is in the format “St x” where x is a system-generated number.
Use Default Time If set to true, the default time tag reference defined on the Company level is used for this
Tag Reference station. If set to false, an override can be specified.
Default value is true.
Time Tag Reference Select whether the station applies a time tag based on first sample or time trigger.
This field is disabled when Use Default Time Tag Reference is set to true.
Default value is disabled.
Default Time Zone The default time zone for devices within the selected station. Devices can be configured
to override this setting on a case-by-case basis.
Default value is UTC.
Devices Adjust for Specify whether devices within this station automatically adjust for daylight saving time.
DST Default value is false.
Global Connection Specify the Global Connection Polling Interval of the Station in minutes. Range is 1 to 1440
Polling Interval minutes.
Default value is 5 minutes.
Field Description
Device Name The name of the device saved to the oscillography data filename.
Valid range is a name that is between 1 and 14 characters in length and must be unique
from any other device within the station.
Default text is in the format “Device x” where x is a system-generated number.
Refer to the ARRM FTP Directory Delta Support for Different ftp ls Formats section for the
Device Name Suffix.
Use Default Time Specify if the selected device should use the time zone configured on the station level.
Zone Default value is true.
Time Zone Select the time zone that the device is located in. Disabled when Use Default Time Zone is
set to true.
Default is disabled.
Device Adjusts for Specify whether the device automatically adjusts for daylight saving time.
DST Default is disabled.
Field Description
Logical Device The device name that the ARRM application uses to replace the "%s" format specifier in the
Name file set template configuration, during the file set retrieval operation.
Valid range is a name that is 32 characters or less in length.
Default value is Empty.
Use Global Station Specify if the Global Connection Polling Interval configured for the station allows for poll-
Connection Polling based File set retrieval.
Interval Default value is True.
Device Connection Specify if the Device Level Polling Interval (in minutes) allows for poll-based File set retrieval.
Polling Interval This parameter is enabled when Use Global Station Connection Polling Interval is set to False.
Range is 1 to 1440 minutes. Default value is 5 minutes.
Field Description
Server Type Select the type of server to use when connecting to the device. MMS is only available if an
IEC 61850 configuration is loaded on the MCP and UR/SFTP is only available if Modbus TCP
IED is configured with protocol TCP/SSH.
Default value is TFTP.
1. NOTE: File Set Templates with File retrieval mode as Directory Delta cannot work when
server is configured as TFTP.
Retrieval Retry If there is a communications error, ARRM retries the file retrieval at a configured interval.
Interval (seconds) Enter the amount of time ARRM waits before retrying a file transfer that has failed. Valid
range is 1 to 60000, default is 60.
FileSet Trigger The amount of time (in seconds) after which the ARRM application starts processing file set
Delay (seconds) retrieval, after receiving a file set trigger request.
TFTP Primary The IP Address of the Primary TFTP server.
Server IP Address Not available if the server type is not TFTP.
Default value is Empty.
TFTP Secondary The IP Address of the Secondary TFTP server.
Server IP Address Not available if the server type is not TFTP.
Default value is 0.0.0.0.
TFTP Timeout The amount of time ARRM waits for each block in a TFTP transfer.
Not available if server type is not TFTP.
Valid range is 1 to 60000.
Default is 500.
MMS Device Select the IEC 61850 device that is used as the file server.
Not available if TFTP/FTP/SFTP is selected as the server type.
FTP Primary Server The IP Address of the Primary FTP server.
IP Address Not available if server type is not FTP.
Default value is Empty.
FTP Secondary The IP Address of the Secondary FTP server.
Server IP Address Not available if server type is not FTP. Enabled when FTP is selected as the server type.
Default value is 0.0.0.0.
Field Description
FTP Server TCP FTP Server TCP port. Enabled when FTP is selected as the server type.
Port Not available if server type is not FTP.
Default value is 21.
FTP Timeout (ms) Timeout for the FTP connection.
Not available if server type is not FTP.
Valid range is 1 to 60000, default is 2000.
FTP Allow Allow Anonymous Login to FTP Server.
Anonymous Login Not available if server type is not FTP.
Enabled when FTP is selected as the server type.
Default value is false.
FTP Anonymous Password for Anonymous Login to FTP Server.
Login Password Not available if server type is not FTP.
This field is enabled when “FTP Allow Anonymous Login” is set to true.
Default value is empty.
FTP Login Name Login ID for FTP connection.
Not available if server type is not FTP.
This field is enabled when “FTP Allow Anonymous Login” is set to false.
Default value is empty.
FTP Password Password for FTP connection.
Not available if server type is not FTP.
This field is enabled when the FTP Allow Anonymous Login field is set to false.
Default value is empty.
FTP Connection FTP Data Connection Mode (Active/Passive).
Mode Not available if server type is not FTP.
Enabled when FTP is selected as the server type.
Default value is Active.
FTP Data Mode in which data must be retrieved from FTP Server (ASCII/Binary).
Representation Not available if server type is not FTP.
Mode Enabled when FTP is selected as the server type.
Default value is Binary.
SFTP Primary The IP Address of the Primary SFTP server.
Server IP Address Not available if server type is not SFTP.
Enabled when SFTP is selected as the server type.
Default value is empty.
SFTP Secondary The IP Address of the Secondary SFTP server.
Server IP Address Not available if server type is not SFTP.
Enabled when SFTP is selected as the server type.
Default value is 0.0.0.0.
SFTP Server TCP SFTP Server TCP port.
Port Not available if server type is not SFTP.
Default value is 22.
SFTP Timeout (ms) Timeout for the SFTP connection.
Not available if server type is not SFTP.
Valid range is 1 to 60000, default is 2000.
Field Description
SFTP Authentication Mode for SFTP Connection (Password/Public Key).
Authentication The user needs to configure SFTP Login name and Password if Password mode is selected.
Mode For Public Key Authentication mode, you need to generate and copy the ssh public key to
the location in IED specified by the vendor (click the Utilities powerbar button in the MCP
HMI to Generate Gateway Key Pair).
Not available if server type is not SFTP.
SFTP Login Name Login ID for SFTP Connection.
Not available if server type is not SFTP.
This field is enabled when “SFTP Authentication Mode” is set to Password.
Default is empty.
SFTP Password Password for SFTP Connection.
Not available if server type is not SFTP.
This field is enabled when “SFTP Authentication Mode” is set to Password.
Default is empty.
UR/SFTP Device Select the UR SFTP device that is used as the file server.
Not available if server type is not UR/SFTP.
File Set
Table 6-131: ARRM - File Set
Field Description
File Set Name A unique identifier for the file set. Range is 1 to 32 ASCII characters.
Default value is in the format “File Set x” where x is a system-generated number.
File Set Template Select one of the available file set templates.
Include in Connection Specifies whether polling is enabled or disabled.
Polling If this parameter is enabled (True), File Set retrieval occurs through connection polling.
Default value is False.
NOTE: If this parameter is true, it is recommended to use the Overwrite option in the
Fileset Template to avoid High Disk Usage. In the case of COMTRADE files, use the “New
file with IEEE naming” option.
NOTE: Users should include for connection polling only files which are always available
in the end device, otherwise the connection poll may result in a failed file transfer, due
to the file(s) no longer being available in the end device.
1. NOTE: User shall not be able to configure file sets that have no means to be retrieved
i.e. at least one retrieval trigger (RcdMade Mapped DI Point) or Connection Polling
must be “True”.
1. NOTE: File Retrieval using Static Name in the File Set Template requires either
“Include in Connection Polling” or a mapped “RcdMade Mapped DI Point” configured.
Field Description
Use File Trigger Event If set to true, event time that triggers file retrieval operation is used as a timestamp for
Timestamp creation of files in New File with Timestamp File Storage method. Otherwise file
retrieved time is used. This is only applicable to New File with Timestamp File Storage
method.
Default value is false.
Recording Made If enabled, ARRM monitors a configured digital input point mapped to the Recording
(RcdMade) Enable Made indication of the device.
When a specific File Set Template - Standard is selected, this field is enabled.
Default is disabled.
RcdMade Mapped DI If the Recording Made (RcdMade) setting is enabled, select a system point to monitor
Point for RcdMade indications.
When the Recording Made (RcdMade) Enable field is set to true, this field is enabled.
Default is disabled.
NOTE: To avoid duplication, the RcdMade DI point must be in OFF state and turn ON
momentarily to signal that a new file is available or remain ON until the file is read by
ARRM. This is only required if the File Set Templates File Type is General.
Fault Number Point If enabled, ARRM monitors a configured analog input or accumulator point mapped to
Enable the Fault Number indication of the device.
When a specific File Set Template is selected, this field is enabled.
Default is disabled.
Fault Number Point If the Fault Number Point Enable setting is enabled, select a system point to monitor for
fault number indications.
1. NOTE: File retrieval using Fault Number requires %u in the “File Set Template→
Retrieved file Absolute Path Name” field(eg: Osc%u) and mapping an AI point under
“Fault Number Point”, regardless of “Include in Connection Polling” being True or False
Reset Recorder Memory If enabled, ARRM operates the MemRs command after the file set is retrieved. This
(MemRs) Enable command may also be used to clear the file trigger point in D25 devices.
Default value is false.
DO MemRs Point If the Reset Recorder Memory setting is enabled, select a system point to operate after
a file retrieval operation is completed.
For a list of pseudo points created for this file set by the ARRM application, refer to ARRM Pseudo Points. Each
pseudo point has a reference and a description, as defined below.
Table 6-132: ARRM Pseudo Points - File Set
Field Description
Reference A user-defined name that can be used for quick indexing and filtering. Maximum 66
characters, ASCII only.
Description A user-defined block of text that provides a detailed and localized description of the
group. Maximum 128 characters.
Setting Description
Template ID A unique identifier for the file set template.
Storage This is the location on the MCP that records are stored in. This directory is located within
Directory /mnt/datalog/arrm/.
The “&” character is used as a placeholder in the Storage Directory to specify a Local File
Extension for retrieved files. For example, if you want to save retrieved files with extension “abc”
then the Storage Directory is to be configured as “xyz&abc”, where “xyz” represents Storage
Directory and “abc” represents the local extension. This is applicable to files other than the
COMTRADE file type.
The valid value for Storage Directory has a minimum length of 2 characters (that is, cannot be
blank) and must not start or end with special characters.
File Extension Files with this file extension are retrieved by the ARRM from the IED. The downloaded files are
saved with the same file extension if the local file extension is not configured in the Storage
Directory setting. This field is not used if the File Type is set to COMTRADE.
Delete Files If enabled, ARRM automatically deletes files in the Storage Directory created based on this
Automatically template when the storage quota is exceeded.
File Type Select the type of file being downloaded.
• For COMTRADE-based Templates, select COMTRADE-format data only
• For SELBIN-based Templates:
o Select EVE for Event files; e.g., EVE_10009.TXT
o Select CEV for Compressed Event Files; e.g., CEV_10009.TXT
o Select BOTH for EVE and CEV Event Files
Setting Description
File Retrieval Select a value:
• Static Name: Select this option if the data to be retrieved is stored in a fixed location on
the target device.
• Retrieved File Absolute Path: Enter the path to the data file on the remote device. Do
not enter a file extension.
Add a logical device placeholder into the filename to create dynamic filenames that
change based on which Device is using the template.
The logical device placeholder "%s" is replaced with the Logical Device Name from
the Device that is using this template. For example, /SOE/event%s.
• Enable Record Number: If enabled, you can enter a number to be appended to the
filename of retrieved records. This can be used for D25 SOE logs which have a record
number as part of the filename (for example, enter 1 for A027_DISOE_LOG1.CSV).
• Enable FileName to Save: If enabled, the retrieved remote data file is saved locally
using the specified file name.
• Fault Number: Select this option if a new record is created on the device each time a
fault occurs.
Retrieved File Absolute Path: Enter the path to the data file on the remote device. Do not
enter a file extension.
Add placeholders into the filename to create dynamic filenames that change based on
which fault number is being retrieved and which Device is using the template.
The logical device placeholder "%s" is replaced with the Logical Device Name from the
Device that is using this template.
The fault number placeholder "%[fw]u" is replaced with the fault number currently being
retrieved. In place of [fw], specify either no number or a number between 1 and 20 to
give the field width. For example, %3u is replaced with 003 if the retrieved fault number is
3.
Specify at least 1 fault number placeholder but no more than 4.
Specify 1 or no logical device placeholders.
• Max Number of Files: The maximum number of files that can exist in the remote
device before older files are deleted to make room for new ones. This setting
prevents the MCP from attempting to retrieve files that no longer exist.
• Fault Number Rollover: This is the highest fault number that the device uses before
the internal fault number counter rolls over specified as “n” in 2n-1. Range is 8, 16
or 32. Default is 16.
• Directory Delta: This option monitors a fixed location on the target device and downloads
any new files as they are created.
• Directory Name: Enter the path to the data file on the remote device. Do not enter a file
extension.
• File Retrieval Expression Type: This is a Unix shell-style wildcard that is used to specify
the files within a directory that are considered for retrieval. Default is *, which specifies all
files in the directory. The specific pattern matching symbols are as follows:
* matches everything
? matches any single character
[seq] matches any character in seq
[!seq] matches any character not in seq
Setting Description
File Storage For Standard Templates, select a value:
• Append: If the file does not exist, ARRM creates it. If the file exists and it is not larger than
the specified maximum size, ARRM appends the contents of the retrieved file to the existing
one. ARRM appends an incrementing number to the filename to distinguish between
different files (for example, dfr_001.txt). Available for general file type only.
Max File Size: Enter the file size, in bytes, that the download is limited to. Range is 1 to 4 32-
1, default is 65535.
• New file with IEEE naming: A new file is created whenever information is downloaded. The
file name is defined using the IEEE naming convention. Available for COMTRADE file type
only.
User Type: Specify the type of data being retrieved. This information is then appended to
the file name using the IEEE naming convention. For example, you can enter DFR, PQ, or
ADCP. Range is 1 to 4 ASCII characters.
• New file with timestamp: A new file is created whenever information is downloaded. Enter
both a file name (to which the timestamp is appended) and a valid extension. For example,
adcp_090416082335.txt was created on April 16, 2009, at 08:23:35. Available for general
file type only.
• Overwrite: When the parameter Include in Connection Polling is set to True, it is
recommended to use this option for retrieval of fixed files from IEDs to avoid high disk
usage in the MCP due to connection polling of file sets.
Available for the GENREAL file type only.
Setting Description
SELB Device Select the SEL Binary device (supports SEL Fast Meter Protocol) that is used as the file server.
Not available if TFTP/FTP/SFTP/UR SFTP/MMS/GENA is selected as the server type.
GENA Device Select the Generic ASCII device (supports SEL ASCII Protocol) that is used as the file server.
Not available if TFTP/FTP/SFTP/UR SFTP/MMS/SELB is selected as the server type.
Template ID A unique identifier for the file set template.
Storage This is the location on the MCP that records are stored in. This directory is located within
Directory /mnt/datalog/arrm/.
The valid value for Storage Directory has a minimum length of 2 characters (that is, cannot be
blank) and must not start or end with special characters.
File Extension The extension to append to any files downloaded using this template. This field is not used if
the File Type is set to COMTRADE.
Delete Files If enabled, ARRM automatically deletes files in the Storage Directory created based on this
Automatically template when the storage quota is exceeded
File Type Select the Fault file type to be retrieved.
ARRM supports file archival of EVE and CEV files from the SEL IEDs.
The default value in the “Options” field is None.
The “Options” configuration allows you to choose the frequently used command options
used with EVE and CEV commands such as C, L and Lyyy. The template also allows you
to choose “other” supported command options with EVE and CEV where you can enter
the command extensions supported in the Additional Option field.
File Storage For Selbin Templates, select a value:
• FileName with timestamp: A new file is created whenever information is downloaded.
This option saves the event files in the format:
EVE_YYMMDDHHMMSS_Msec.EVE/CEV_YYMMDDHHMMSS_Msec.CEV.
For example, EVE_090416082335_123.EVE will be created for a file that was generated
on April(MM) 16(DD), 2009(YYYY), at 08(HH):23(MM):35(SS).123(mSec)
• FileName with Event Number: A new file is created whenever information is downloaded.
This option saves the event files in the format:
EVE_EventNumber.EVE/CEV_EventNumber.CEV.
For example, EVE_100009.EVE will be created when the end device sends a command
response when this specific file is queried.
Connection Polling
The ARRM Connection Polls are required because, in absence of any events, there are no potential ARRM file
transfers for days or weeks at a time; consequently, ARRM files will not appear with an up-to-date status.
The file sets configured for polling will be triggered by the Configured Polling interval (either Global Connection
Polling Interval or Device Connection Polling Interval) in addition to their configured event trigger. The ARRM
configuration will not impose any restrictions on files to be included in connection polling – none, one, more or
all files can be configured for connection polling, as required.
An asterisk (*) is appended to each file set that is supported by periodic polling.
NOTE: In the case of fault number-based file sets which are included in connection polling, ARRM always
retrieve files with the last fault number value. Consideration must be given to the files included in
connection polling so redundant files are not created un-necessarily.
The file name convention is based on IEEE C37.232 with additional data fields as required for this functionality
(i.e., Delimiters, FileSetName, and FileTransferResult)
The following table lists the ftp ls formats which the MCP ARRM supports in directory delta mode. You must
provide the suffix listed in the below table for each format in the device name configuration.
Configuration Overview
The MCP Automation applications retrieve data from the real-time database, manipulate the data and store the
results in the real-time database. The type of data supported by the automation applications varies depending
on the application. The MCP currently supports the following automation applications:
• System Point Manager
• Accumulator Freeze
• Alarm
• Analog Report Generation
• Calculator
• Automated Record Retrieval
• Calculator
• Data Logger
• Input Point Suppression
• Load Shed and Curtailment
• Redundancy Manager
• Remote Logging (Rsyslog)
Automation Applications
Some features are implemented through automation applications which retrieve data from the real-time
database, manipulate the data and store the results in the real-time database. The type of data supported by
the automation applications varies depending on the application.
» To configure automation applications for use on the MCP you typically:
1. Select data points.
2. Define application points.
3. Set up the point manipulations and associated settings.
4. Save and run the configuration file by committing the changes.
Accumulator Freeze
The Accumulator Freeze feature of the System Point Manager allows you to create groups of accumulators that
are frozen periodically or on demand.
Table 6-138: Accumulator Freeze
Field Description
Group Name A short text description that is assigned to the group. Maximum of 66 ASCII characters
comprising alphanumeric characters, space, underscore and dash.
Group ID Non-editable. A unique reference identifier for the group.
Group Description A description of the group. Maximum 128 characters.
Configure Freeze Opens the Freeze Time Point window, which contains the following two fields. The system
Time point created for this group is available under the System Point Manager application.
Freeze Time Acc A user-defined name that can be used for quick indexing and filtering. Maximum 66
Name characters, ASCII only.
Freeze Time Acc A user-defined block of text that provides a detailed and localized description of the group.
Description Maximum 128 Unicode characters.
Field Description
Copy Value Policy Determines the action performed on all members of the group if an accumulator freeze is
triggered. If Absolute is selected, the frozen value of the mapped point is applied to the
corresponding frozen value point. If Delta is selected, the value of the frozen value point is
updated by the amount of difference between the new frozen value and the previous
frozen value.
Note regarding the Delta setting: If the current frozen value is smaller than the previous
frozen value, the delta value calculated would be calculated as a rollover number, causing
the frozen value accumulator points to be extremely large. For example, if the current
frozen value is 3 and the previous frozen value is 258, the resulting frozen value
accumulator point is shown as 9.22e+18.
Freeze Interval Specifies the frequency, in minutes, at which freeze commands are automatically issued to
(min) the group. The range is 0 to 14400 minutes (i.e., 10 days). Enter 0 to disable.
Time of Hour The time of day to align the freeze interval to. For example, if the alignment offset is set to
Alignment Offset xx:15, the freeze operation is aligned to begin at 15 minutes past the hour. The freeze
interval setting must divide evenly into an hour to facilitate the offset. Disabled if the Freeze
Interval is set to 0.
Freeze Trigger Define a system point (digital input) that can be used to trigger freeze commands to the
Point group. The trigger state (ON or OFF) is configurable. Disabled if a Freeze Report Point is
enabled.
Freeze Report Define a system point (digital output) that is triggered when a freeze operation is initiated.
Point The control type (close, trip, latch ON, latch OFF, pulse ON, or pulse OFF) and pulse duration
(in milliseconds, not available for latch controls) are configurable. Disabled if a Freeze
Trigger Point is enabled.
When you check the digital output box in the accumulator freeze, the Freeze Interval and
Freeze trigger point are both disabled.
If you want a DO to be triggered whenever a Freeze command is sent on an accumulator,
you must make configuration changes in two different Accumulator Groups. In one group,
you should be able to configure the Freeze parameters on a point and in other group the
DO point triggering can be configured for the same point of the earlier group.
Point Selection Area
You can select system points to add to the accumulator freeze group using the system
point tree. System points can be used in multiple accumulator freeze groups. Click the
checkbox to the left of a point or group name to add a point or a group of points to the
group. Points included in the group are shown at the right-hand side of the point selection
area. To remove a point, uncheck the appropriate box in the system point tree or highlight
the point and click the Delete button. Click the Delete NE to remove any points that are not
valid (that is, points that have been deleted from the system database after they were
included in the accumulator freeze group).
The Frozen Value Reference and Frozen Value Description fields define the accumulator
point that is created for the selected point. The value of this accumulator points changes
based on the Copy Value Policy defined above.
Field Description
Group Name A short text description that is assigned to the group. Maximum of 66 ASCII characters
comprising alphanumeric characters, space, underscore and dash.
Group ID Non-editable. A unique reference identifier for the group.
Group Description A description of the group. Maximum 128 Unicode characters.
Configure Group Opens the Group Point window, which contains the following two fields. The system point
Point... created for this group is available under the System Point Manager application.
Group Point Reference
A user-defined name that can be used for quick indexing and filtering. Maximum 66
characters, ASCII only.
Group Point Description
A user-defined block of text that provides a detailed and localized description of the group.
Maximum 128 Unicode characters.
Lower Limit The minimum value that must be met by at least one of the points within the group. If this
limit is not met by any points in the group, the value and quality of the lowest-priority point
is reported as the value and quality for the group. Note that the limit value itself is
considered within range (that is, a value of -1000 is considered valid for an analog
selection group with a lower limit of -1000). If all the points are below the defined lower
limit, the value of the lowest priority point is reported.
Upper Limit The maximum value that can be reported by any of the points within the group. If this limit
is exceeded by all the points in the group, the value and quality of the lowest-priority point
is reported as the value and quality for the group. Note that the limit value itself is
considered within range (that is, a value of 1000 is considered valid for an analog selection
group with an upper limit of 1000). If all the points are above the defined upper limit, the
value of the lowest priority point is reported.
Point Selection Area You can select system points to add to the analog value selection group using the system
point tree. Click the checkbox to the left of a point or group name to add a point or a group
of points to the group. Points included in the group are shown at the right-hand side of
the point selection area. To remove a point, uncheck the appropriate box in the system
point tree or highlight the point and click the Delete button. Click the Delete NE to remove
any points that are not valid (that is, points that have been deleted from the system
database after they were included in the analog value selection group).
Priority
Use a numeric value to set the priority of each point within the group, with 0 being the
lowest priority.
Control Lockout
The Control Lockout feature of the System Point Manager allows you to ensure that only a single master station
can access a group of controls at one time and can lock out groups of controls to allow for safer local
maintenance. You can create up to 8 remote control groups and up to 10000 local control groups. Any digital
output (except for those owned by the System Point Manager application) can be included in one remote and
one local group.
The Control Lockout feature of the System Point Manager allows users to implement two types of control lockout
groups:
• Remote Groups
• Local Groups
Remote Groups
Remote Groups ensure that only a single master station can access a group of controls at one time. Up to 8
remote control groups can be created; i.e., up to 8 control sources can be inter-locked.
A remote group is locked when a control is issued on any member point. For the duration of the control plus 100
milliseconds, no other commands are accepted on controls in the group unless they originate from the
application or device that issued the first control operation. After this period has passed, the controls are
available to all participating (“candidate”) applications and devices again.
NOTE: Reboot of the MCP resets the locked groups.
Local Groups
Lock out groups of controls to allow for safer local maintenance, or any other applications where a group of
controls need to be blocked.
Normally, control lockout is manually initiated by an operator and commands are not accepted until the lockout
has been released. Control lockout can also be achieved using applications such as Calculator or LogicLinx to
issue the lockout commands.
A local group is locked by turning ON (latch) the associated Local Group Lockout DO and is unlocked by turning it
OFF (latch).
Any of the candidate application included in the local lockout group can remove the lockout by sending the OFF
command through the Local Control Group Lockout feature.
NOTE: Reboot of the MCP resets the locked groups.
Applications not included in a local group (i.e., the box under included candidates is NOT checked)
– are unrestricted. This means that they are not affected by local group lockouts and can still
operate controls on all points even when a local group lockout is in effect.
In addition, the application which turned on the local group lockout (i.e., issued the latch ON for
Group Lockout DO reference) can still operate controls on all points part of that specific local group,
as “owner”, and all other applications which have the include box checked are not able to operate
the controls in this locked local group.
Examples
In each configuration, the following candidates are present, included as shown:
• HMI (the MCP HMI)
• Master1 (a first DNP3 Master)
• Master2 (a second DNP3 Master)
• Master3 (a third MODBUS Master)
• Calculator (via the configured expressions in Calculator)
Use case A
At run time, an operator uses the HMI to lock this local group by turning ON the Local Group Lockout DO, directly
from the HMI.
Controls to the local group DO points, issued from the HMI still operate, since the HMI was the issuer of the lockout
command and is now the current owner of the locked group; this allows users to still execute commands from
the HMI for testing purposes.
Controls from Master1, Master2 and Calculator do not operate because the local group is locked, and these
candidate applications are included.
Controls from Master3 operate even with the local group being locked because this candidate application was
not included.
When finished, the operator uses the HMI to remove the group lockout by turning OFF the Local Group Lockout
DO, directly from the HMI.
Use case B
Here the system is configured with a Digital Assignment calculator expression which controls the Local Group
Lockout DO, based on simple conversion logic. Assume the HMI has the capability to change the state of the input
of this calculator expression; this allows an operator to perform an HMI action which has the final effect of
controlling the Local Group Lockout DO, but now indirectly via Calculator.
The operator uses the HMI to turn ON the calculator input, which in turn locks the local group.
Controls to the local group DO points, issued from the HMI do not operate, since the HMI was not the issuer of
the lockout command, but – technically – Calculator is the issuer of the lockout command and Calculator is now
the current owner of the locked group; this does not allow users to execute any commands from the HMI, even
though – from a human operator perspective – the lockout order was done from the HMI.
Controls from Master1 and Master2 do not operate because the local group is locked, and these candidate
applications are included.
Controls from Master3 operate even with the local group being locked because this candidate application was
not included.
If Calculator has other expressions which are mapped to the DO points in the locked local group, those execute
because Calculator is seen as the owner of the group in this moment.
When finished, the operator uses the HMI to remove the group lockout by changing the state of the input
calculator expression which controls the group lockout. Turning OFF the Local Group Lockout DO directly from
the HMI cannot be done since the issuer of the lock is – technically – not the HMI).
A implementation of this use case is to have a throw switch position acquired via any application as a DI which
then is used as calculator input to the assignment expression controlling the group lockout. Multiple local groups
can be controlled by the same DI using multiple calculator assignment expressions, or by individual DI points.
NOTE: For many MCP applications, pseudo (logical) points can still be controlled using CLOSE or PULSE_ON to
attain an ON action, and, respectively – TRIP or PULSE_OFF to attain an OFF action.
Field Description
Group Name A short text description that is assigned to the group. Maximum of 66 ASCII characters
comprising alphanumeric characters, space, underscore and dash.
Group ID View-only field: A unique reference identifier for the group.
Group Description A description of the group. Maximum 128 Unicode characters.
Configure Indication Opens the Group Status Indication Points window, which contains the following eight
Points... fields. The system points created for this group are available under the System Point
Manager application.
<Point> Reference
A user-defined name that can be used for quick indexing and filtering.
Maximum 66 characters, ASCII only.
<Point> Description
A user-defined block of text that provides a detailed and localized description
of the point. Maximum 128 characters.
Locked DI
The digital input point that is ON when the group is locked out.
Active DI
The digital input point that is ON when a control in the group is in operation.
Group Owner AI
The analog input that contains the ID number of the application that has locked
the group. You can use the AI Text Enumeration feature to display a user-
friendly text string instead of the identification number.
Group Lockout DO
The digital output point that must be operated to initiate the control lockout.
Control Lockout Select the applications that are candidates of the lockout group.
Candidates selection
area Applications not included in a local group are unrestricted. This means
that they are not affected by local control lockouts and can operate controls on all
points even when a lockout is in effect.
Point Selection Area You can select digital output system points to add to the control lockout group using
the system point tree. Click the checkbox to the left of a point or group name to add a
point or a group of points to the group. Points included in the group are shown at the
right-hand side of the point selection area. To remove a point, uncheck the appropriate
box in the system point tree or highlight the point and click the Delete button. Click the
Delete NE to remove any points that are not valid (that is, points that have been deleted
from the system database after they were included in the group.
The flow chart depicts the Control lockout processing when both Remote and Local Control
Groups are configured. See the following figure.
NOTES:
Note 1: Any candidate can reset the Remote Control Group Lockout Digital Output point at any time.
Note 2: Any candidate can reset the Local Control Group Lockout Digital Output point any time. This behavior
is same as Remote Control Group Lockout, and this is to eliminate potential lockouts when a candidate that set
it on (e.g. remote master) is no longer available and the system goes into a denial of service at runtime.
Double Point
The Double Point feature of the System Point Manager allows you to associate two digital input points to form a
double point indication.
» To create a double point:
1. Select a device or application in the left pane. The Close Point Reference and the Open Point Reference
fields must refer to points from the same application or device, so selecting a device or application in
this pane limits both fields accordingly.
2. Click the Add button at the top right of the screen.
3. Configure the double point using the fields below.
4. Click the Save button.
Table 6-140: Double Point
Field Description
Reference A user-defined name that can be used for quick indexing and filtering. Maximum 66
characters, ASCII only.
Description A user-defined block of text that provides a detailed and localized description of the group.
Maximum 128 characters.
Close Point A point selection tree that allows you to choose the point to be used as the Secondary
Reference source. Only points of the same data type that have not already been selected as a Primary
source are available.
Open Point A point selection tree that allows you to choose the point to be used as the Secondary
Reference source. Only points of the same data type that have not already been selected as a Primary
source are available.
State Text labels to be used for each of the four states of the double point. Maximum 32
characters.
Invalid State The amount of time, in milliseconds, that the two source points must remain in the 1 state
Qualification before the double point is reported as invalid. Range is from 0 to 65535.
Output Type/Output You can specify up to two digital output points that can be used to operate the double
Status point. If you choose Single Output, you can select one point via the Output Status field to
receive Trip and Close commands. If you choose Dual Outputs, you can select two points
via the Output Status field; one to receive Trip commands and another to receive Close
commands. Both the Single Output and Dual Outputs modes allow you to enable or disable
inclusion of the status of the output in the double point's quality flag.
NOTE:Double Point functionality is only for Alarms, thereafter it can be used for One Line Data Sources.
Field Description
Group Name A short text description that is assigned to the group. Maximum of 66 ASCII characters
comprising alphanumeric characters, space, underscore and dash.
Group ID Non-editable. A unique reference identifier for the group.
Group Description A description of the group. Maximum 128 Unicode characters.
Configure Group Opens the Group Quality Point window, which contains the following two fields.
Quality Point... Point Reference
A user-defined name that can be used for quick indexing and filtering. Maximum
66 characters, ASCII only.
Point Description
A user-defined block of text that provides a detailed and localized description of
the group. Maximum 128 characters.
This digital output point activates the suppression group upon receipt of a latch ON, close,
or pulse ON control. Suppression can be disabled through a latch OFF, trip, or pulse OFF
control.
Input suppression Select the applications that are candidates of the suppression group. When the input point
candidate selection suppression group is active, the applications selected here do not receive information
area from the points selected below.
Candidate Reference
A user-defined name that can be used for quick indexing and filtering. Maximum
66 characters, ASCII only.
Candidate Description
A user-defined block of text that provides a detailed and localized description of
the group. Maximum 128 characters.
Point Suffix
A unique identifier that is added to the end of the input point suppression pseudo
point generated for this point. Maximum 60 characters, ASCII only.
NOTE: The applications selected as candidates of the suppression group are common to
all groups.
Field Description
Point Selection Area You can select system points to add to the input point suppression group using the system
point tree. Click the checkbox to the left of a point or group name to add a point or a group
of points to the group. Points included in the group are shown at the right-hand side of
the point selection area. To remove a point, uncheck the appropriate box in the system
point tree or highlight the point and click the Delete button. Click the Delete NE to remove
any points that are not valid (that is, points that have been deleted from the system
database after they were included in the group.
Suppression State
Select whether the application provides the last reported value or a pre-configured
suppression value to candidate applications when suppression is enabled.
Override Value
Choose the value to supply to candidate applications when suppression is enabled.
ON or OFF for DI points, or a value entry for AI points. This field is disabled and
ignored when Last Reported is selected as the point's suppression state.
Redundant I/O
The Redundant I/O feature of the System Point Manager allows you to specify a Secondary data source for any
point that is used to report the value and quality of the Primary point in the event the Primary point becomes
invalid or questionable.
Controls sent to a Primary point while a Secondary data source is in effect automatically routed to the Secondary
data source instead. Acknowledgement messages are handled by the MCP to appear as though they were routed
from the Primary point. A virtual quality flag, Secondary Source, is applied to the Primary point and is visible
within certain system applications, however, this flag is not stored as an actual quality flag.
Please review this note if you are using input point suppression in conjunction with redundant I/O.
Table 6-142: Redundant I/O
Field Description
Point Selection You can select the system points that you would like to have a Secondary data source. Click
Area the checkbox to the left of a point or group name to add a point or a group of points to the
group. Points included in the group are shown at the right-hand side of the point selection
area. To remove a point, uncheck the appropriate box in the system point tree or highlight
the point and click the Delete button. Click the Delete NE to remove any points that are not
valid (that is, points that have been deleted from the system database after they were
included in this list.
Secondary Source A point selection tree that allows you to choose the point to be used as the Secondary
source. Only points of the same data type that have not already been selected as a Primary
source are available.
Field Description
IO Group Opens the Redundant I/O Group window, which contains the following six fields. Redundant
I/O groups can be reused for multiple points.
Group Name
A short text description that is assigned to the group. Maximum of 66 ASCII
characters comprising alphanumeric characters, space, underscore and dash.
Group Description
A user-defined block of text that provides a detailed and localized description of the
group. Maximum 128 Unicode characters.
Secondary Source DI
This digital input point is set to ON if any point within the I/O group is relying on a
Secondary source. This field is a user-defined name that can be used for quick
indexing and filtering. Maximum 66 characters, ASCII only.
Secondary Source DI Description
A user-defined block of text that provides a detailed and localized description of the
Secondary source DI point. Maximum 128 characters.
Secondary Source DO
This digital output point transfers all Primary points within the group to their
respective Secondary sources upon receipt of a latch ON, close, or pulse ON control.
The points can be returned to their own reported values through a latch OFF, trip, or
pulse OFF control. This field is a user-defined name that can be used for quick
indexing and filtering. Maximum 66 characters, ASCII only.
Secondary Source DO Description
A user-defined block of text that provides a detailed and localized description of the
Secondary source DO point. Maximum 128 characters.
Control In-Progress
The Control In-Progress feature of system point manager allows you to trace if a control command on digital
output point is in progress or not. This feature also provides information about the application that has issued
the command and the control command type.
You can add any number of digital output points to a control in-progress group, but any digital output point may
only be included in a maximum of one group at a time. The Apply and Remove tag and alarm local HMI
commands are only supported by points generated by this feature.
Field Description
Group Name A short text description that is assigned to the group. Maximum of 66 ASCII characters
comprising alphanumeric characters, space, underscore and dash.
Group ID Non-editable. A unique reference identifier for the group.
Group Description A description of the group. Maximum 128 Unicode characters.
Point Selection You can select system points to add to the control in progress group using the system point
Area tree. Click the checkbox to the left of a point or group name to add a point or a group of points
to the group. Points included in the group are shown at the right-hand side of the point
selection area. To remove a point, uncheck the appropriate box in the system point tree or
highlight the point and click the Delete button. Click the Delete NE to remove any points that
are not valid (that is, points that have been deleted from the system database after they were
included in the group.
In Progress Point
Opens the In-Progress Point Details window, which contains the following two fields.
Point Reference
A user-defined name that can be used for quick indexing and filtering. Maximum 66
characters, ASCII only.
Point Description
A user-defined block of text that provides a detailed and localized description of the
group. Maximum 128 Unicode characters.
This digital input point is set, when control command on the Digital Output point is in progress
and is reset when the control command is complete.
Control command is complete either on receiving a command response or expiry of
maximum control time. In case of no command response, the maximum time for which the
point is in set state depends on type of control command issued. The maximum time is
calculated as per the below formulae.
Pulse On / Pulse Off: (Pulse-On Duration + Pulse-Off Duration) * Number of Pulses + 100ms
Trip / Close: (Pulse-On Duration) * Number of Pulses + 100ms
Latch-On / Latch-Off: 100ms
Last Issued Control Type
Opens the Last Issued Control Point Details widow, which contains following two fields.
Point Reference
A user-defined name that can be used for quick indexing and filtering. Maximum 66
characters, ASCII only.
Point Description
A user-defined block of text that provides a detailed and localized description of the
group. Maximum 128 Unicode characters.
This analog input point provides the information about the last control command type that
was issued.
The possible values of this analog input point are:
-1 - Digital Output point is offline
0 - Digital Output Point is online
1 - Last issued control command on Digital Output point is Trip
2 - Last issued control command on Digital Output point is Close
3 - Last issued control command on Digital Output point is Pulse On
4 - Last issued control command on Digital Output point is Pulse Off
5 - Last issued control command on Digital Output point is Latch On
6 - Last issued control command on Digital Output point is Latch Off
Field Description
Last Issued Application
Opens the Last Issued Application Point Details widow, which contains following two fields.
This analog input point gives the application ID of the application that has issued the
command in the digital output point.
Point Reference
A user-defined name that can be used for quick indexing and filtering. Maximum 66
characters, ASCII only.
Point Description
A user-defined block of text that provides a detailed and localized description of the
group. Maximum 128 Unicode characters.
If the control command issuer application is an automation application, then the value is one
from the below list. If the application is not an automation application, the application ID is
provided as a pseudo point in the issuer application.
-1 - HMI
-2 - Calculator
-3 - Data Logger
-4 - LogicLinx
-6 - Redundancy Manager (not supported in G100)
-7 - System Status Manager
-9 - System Point Manager Control Lockout
-10 - System Point Manager Input Point Suppression
-11 - System Point Manager Accumulator Freeze
-12 - System Point Manager Analog Value Selection
-13 - System Point Manager RIO
-14 - Load Shed Curtailment
-15 - Digital Event Manager
-23 - Analog Reports
Alarm
In the substation-monitoring environment, alarms are used to indicate the occurrence of an event that requires
attention, for example, the opening of a breaker due to an over-current condition.
The Alarm (Digital Event Management) functionality applies to the MCP HMI as well as at database level in form
of pseudo points that can be mapped to other applications.
The MCP monitors a given set of digital input points for alarm conditions. Each configured alarm by default has
no associated pseudo points. However, if the “individual digital input indications” parameter is set in an alarm
group, then a single digital input pseudo point is created for each alarm in the group.
Upon detecting an alarm condition on a source point or a group of points, the MCP creates a record in the
database and presents the alarm to the operator on the MCP Active Alarms page for further action. Once an
alarm is acknowledged it is archived by moving it from the Active Alarms page to the Historical Alarms page.
You can:
• View active alarms
• View historical alarms
• Acknowledge an alarm
• Configure alarms, including double-point alarms, alarm points, and alarm settings
• Enable/mute an audible alarm
Alarm Types
The following alarms types are configurable:
• Deviation Alarms (2-state): Generates an active alarm when the point state changes from normal to
alarmable and archives the alarm only when the point state returns to normal and the alarm is
acknowledged.
• On Update Alarms (2-state): Generates an active alarm when the alarm state changes from one state
to another and archives the alarm when the alarm is acknowledged. In effect, two alarms are created:
the first alarm is generated when the source point changes from ON to OFF, and a second alarm is
generated when the source point changes from OFF to ON.
• Double Point Alarms (4-state): Two alarm types are generated – an On-Update Alarm and a Deviation
Alarm.
NOTE: You can only select pre-configured double points for this type of alarm.
• An On Update Alarm is generated when the double point is in the transit state (both points = 0) or
in the invalid state (both points = 1) and the state persists longer than the configured invalid period
of time. The On Update alarm is archived when it is acknowledged.
• A Deviation Alarm is generated when the double point is in the open state (open point = 1, close
point = 0) and is put in the reset state when the double point returns to the close state (open point
= 0, close point = 1). The Deviation alarm is archived when the alarm state is reset, and it is
acknowledged.
NOTE: The Digital Event Manager does not support the “,” (comma) character in the Point, Point State, Alarm
and Alarm State field descriptions. If the user has used commas in these field descriptions during
configuration, the commas are automatically replaced with spaces during runtime processing.
NOTE: The MCP does not raise alarms on points that are offline.
The Alarm Description is created automatically at point selection time using the Description of the source
selected point. This content can be manually edited later. The maximum length of the Alarm Description is 128
characters. Points originated from IEC61850 Client may have more than 128 characters in their Point
Description which would cause issues when selected as alarms. In such case the resulting Alarm Description
will be trimmed at the end with the characters __#trim# being the last ones, so this situation can be identified
for manual Alarm Description correction.
Configure Alarms
On the Alarm tab on the Configuration page you can configure alarms and modify how alarms are processed
and reported by the MCP. The maximum number of SOE, active alarms and historical alarms that can be present
in the MCP database are configurable and this configuration is done from storage option on the Systemwide
tab.
NOTES:
• Alarms must be configured to activate the Active Alarms page in the MCP HMI.
• Digital points must already be configured in map files before they can be selected as alarmable points.
Deviation Alarms
Table 6-144: Deviation Alarms
Setting Description
Connection The name of the application or device that the point belongs to. This field is not editable.
Source Point DI source point selected from the Point Picker. This field is not editable.
Source Description A detailed and localized description of the point. This field is not editable.
Alarm Reference A user-defined name that can be used for quick indexing and filtering. Maximum 66
characters, ASCII only.
Alarm Description A user-defined block of text that provides a detailed and localized description of the
group. Maximum 128 characters.
Initialized to the source point description when selected, can be edited after.
Text State 0 Enter text to display to represent the point state when the associated digital input point
value becomes 0, typically the Normal state. Range is 1 to 32 alphanumeric characters.
Initialized to the source point state 0 name when selected, can be edited after.
Setting Description
Text State 1 Enter text to display to represent the point state when the associated digital input point
value becomes 1, typically the Alarm state. Range is 1 to 32 alphanumeric characters.
Initialized to the source point state 1 name when selected, can be edited after.
Invalid State Select the state to be reported in the event the point is INVALID.
Description
Alarmable State Select to indicate when the point value is in the alarmable state: OFF (0) or ON (1).
Group Select the single alarm group to which the point's alarm is to be associated with. All
configuration information for the alarm group (for example, color and sound) is applied
to every point associated with the alarm group. Alarm groups are configured on the
Settings tab.
Originator Select the specific originators that trigger an alarm. Available for IEC 61850 points only.
Source Indicates the selected source Home Directory and the Point ID of the Source Point.
Alarm ID Unique Alarm Identification number which is auto-assigned by the Alarm application for
each of the newly configured Alarms.
On Update Alarms
Table 6-145: On Update Alarms
Setting Description
Connection The name of the application or device that the point belongs to. This field is not editable.
Source Point DI source point selected from the Point Picker. This field is not editable.
Source Description A detailed and localized description of the point. This field is not editable.
Alarm Reference A user-defined name that can be used for quick indexing and filtering. Maximum 66
characters, ASCII only.
Alarm Description A user-defined block of text that provides a detailed and localized description of the
group. Maximum 128 characters.
Initialized to the source point description when selected, can be edited after.
Text State 0 Enter text to display to represent the point state when the associated digital input point
value becomes 0, typically the Normal state. Range is 1 to 32 alphanumeric characters.
Initialized to the source point state 0 name when selected, can be edited after.
Text State 1 Enter text to display to represent the point state when the associated digital input point
value becomes 1, typically the Alarm state. Range is 1 to 32 alphanumeric characters.
Initialized to the source point state 1 name when selected, can be edited after.
Invalid State Select the state to be reported in the event the point is INVALID.
Description
ACK Method Select the method to acknowledge the alarm: manually by the user or automatically by
the MCP when generated (and then immediately archived.)
Group Select the single alarm group to which the point's alarm is to be associated with. All
configuration information for the alarm group (for example, color and sound) is applied to
every point associated with the alarm group. Alarm groups are configured on the Settings
tab.
Originator Select the specific originator that triggers an alarm. Available for IEC 61850 points only.
Source Indicates the selected source Home Directory and the Point ID of the Source Point.
Alarm ID Unique Alarm Identification number which is auto-assigned by the Alarm application for
each of the newly configured Alarms.
Global settings
Table 6-147: Alarm Settings - Global
Setting Description
Alarm On Startup Set which points generate alarms when the MCP is started or restarted. This value can be
set to:
• Disable: No points are generated at startup
• All Points: All points mapped to alarms are generated at startup.
• Only Pseudo Points: Only pseudo points mapped to alarms are generated at startup.
DB Commit Time The interval, in seconds, at which data is committed to the database by the digital event
(sec) manager. Range is 10 to 60, default is 30.
SOE Notification Select the method to report SOE events. Range is None, Email. Default is None.
Method
Setting Description
Alarm Notification Select the method to report SOE events. Range is None, Email. Default is None.
Method
Email Notification The amount of time, in seconds, that the digital event manager waits to buffer additional
Delay events before sending an email notification. Range is 30 to 3600. Default is 30.
Notification Time The timezone to use when printing or sending email notifications. Localtime uses the time
Format zone configured on the MCP using mcpcfg and UTC uses the MCP system clock without
any modification.
Log Pseudo Points Select whether or not to report alarms from pseudo digital inputs. You can override this
setting by manually configuring alarms on pseudo digital input points.
Alarm Sound File The audio file to be played by the MCP HMI when an alarm occurs.
Alarm Blinking The speed at which the Active Alarms icon in the powerbar flashes when acknowledged or
Rate unacknowledged alarms are present.
LOCAL HMI Alarm The alarm buzzer ON in seconds. The buzzer is disabled when ON=0
Buzzer ON
LOCAL HMI Alarm The alarm buzzer OFF in seconds. Continuous steady tone is when OFF=0 and ON>0
Buzzer OFF
Setting Description
Display Scheme Select a pre-configured alarm display scheme or create a new one. The settings below
are configurable for each display scheme.
Display Name A user-defined name that can be used for quick indexing and filtering. Maximum 66
characters, ASCII only.
Display A user-defined block of text that provides a detailed and localized description of the
Description group. Maximum 128 characters.
In Alarm Blink The rate at which the active alarm text blinks when it is in the alarm state.
Rate
Reset Alarm Blink The rate at which the active alarm text blinks when it is in the normal alarm state.
Rate
Acked Alarm Blink The rate at which the active alarm text blinks when it is in the acknowledged state.
Rate
Foreground Colors Select the color of the text that appears when a point belonging to the alarm group is
(4x) in one of the following alarm conditions:
• On Update In Alarm,
• Deviation in Alarm,
• Deviation Reset, or
• Deviation Acked (acknowledged)
Click a color Value cell to see the color palette window. The color can be chosen from
Swatch, HSV, HSL, RGB, or CMYK palettes.
Background Select the background (BG) color of the text that appears when a point belonging to the
Colors (4x) alarm group is in one of the following alarm conditions:
• On Update In Alarm,
• Deviation in Alarm,
• Deviation Reset, or
• Deviation Acked (acknowledged)
Click a color Value cell to see the color palette window. The color can be chosen from
Swatch, HSV, HSL, RGB, or CMYK palettes.
Group Alarm The amount of time (in milliseconds) that the group alarm re-flash DI point continues
Reflash Time (ms) to indicate to the master station that a new alarm has occurred.
Pseudo Points Opens the Group Pseudo Point Properties window, which contains the following fields
which are available under the System Point Manager application.
Group This point specifies whether there are alarm records for any alarm
Unacknowledged in this group that are not in the reset or not acknowledged state.
Reference
Group This is a user-defined block of text that provides a description of
Unacknowledged the Group Unacknowledged Reference point.
Description Maximum 128 characters.
Group In Alarm This specifies whether there are alarm records for any alarm in
Reference this group that are not in the reset state.
Group In Alarm This is a user-defined block of text that provides a description of
Description the Group In Alarm Reference point. These pseudo
Maximum 128 characters. points created for
Acknowledge A latch ON, close, or pulse on operation for this point this group
Group Reference acknowledges all alarms in this group. evaluate to TRUE
Setting Description
Acknowledge This is a user-defined block of text that provides a description of when any points
Group Description the Acknowledge Group Reference point. in the group are in
Maximum 128 characters. the conditions
listed
(unacknowledged,
in alarm, or
acknowledged).
<State> A user-defined name that can be used for quick indexing and filtering. Maximum 66
Reference characters, ASCII only.
<State> A user-defined block of text that provides a detailed and localized description of the
Description point. Maximum 128 characters.
Total Alarms A user-defined name that can be used for quick indexing and These two pseudo
Reference filtering. Maximum 66 characters, ASCII only. points refer to an
Total Alarms A user-defined block of text that provides a detailed and localized analog output
Description description of the point. Maximum 128 characters. point that contains
the number of
alarms contained
within the group.
Alarm Indication These DI points are reset whenever one or more of the alarms
Point Reference belonging to the group are active.
Alarm Indication This is the description field for the Alarm Indication Point
Point Description Reference setting.
Group In Alarm This DI point is momentarily de-asserted and re-asserted after a
Reflash Reference short duration of time to alert that a new alarm has occurred in a
group that is already in an alarmable state.
Group In Alarm This is the description field for the Group In Alarm Reflash Point
Reflash Reference setting.
Description
Originators
The MCP documents the sources of control commands and reports this information on the Active Alarms,
Historical Alarms, and SOE List pages under the Originator field.
The Originator is only available for points mapped from IEC 61850 devices that support enhanced security
controls, such as the GE D25 Multifunction IED. It corresponds to the orCat value in IEC 61850-7-3 Table 8. For all
other points, it appears as not supported.
Table 6-150: Originators example from D25
Originator Description
not-supported The control command did not contain originator information.
bay-control Operator using a client located at bay level. For example, a graphical display
panel on a bay controller.
station-control MCP web interface or local HMI.
remote-control Remote operator outside the substation. For example, master station via MCP
server applications, like DNP3 or Modbus.
automatic-bay Automation logic, like Calculator or LogicLinx, through a bay controller.
automatic-station Automation logic, like Calculator or LogicLinx, on the MCP.
automatic-remote Automation logic, like Calculator or LogicLinx, through a master station.
maintenance Actions initiated through the WESMAINT connection.
Originator Description
process Status change occurred without control action. For example, the trip of a circuit
breaker or failure inside the breaker.
Calculator
On the Calculator tab on the Configuration page you configure the Calculator automation application by:
• Selecting data points referenced in expressions (called mapped points)
• Building expressions
The Calculator creates new points in the MCP system point database based on the results of the configured
expressions. Once you have defined calculated points, they are available for selection when creating server
maps, configuring alarms, and creating additional Calculator expressions. During runtime, calculated point
values are presented to the operator on the Application tab on the Point Details page.
NOTE: Data points must already be configured in the MCP before they can be selected as mapped points in the
Calculator.
The Calculator application is typically used in the MCP to carry out the following functions:
• Perform Mathematical, Logical, or Timer based operations on selected system data points
• Automatically operate one or more digital or analog outputs when certain conditions are met
The Calculator creates new points in the MCP system point database based on the results of configured
expressions. All Calculator-owned points are referred to in the expressions by a configurable alias name. The
values of the data points generated by the Calculator are evaluated each time a change event is received on
one of the data points referenced in a defined expression.
The following data types are supported for use in expressions.
• Analog Input (AI)
• Digital (binary) Input (DI)
• Analog Output (AO)
• Digital (binary) Output (DO)
• Accumulators
• Text
The Calculator supports the following types of point calculations:
• Evaluations
• Timers
• Analog Assignments
• Digital Assignments
• Quality conversion
• Type conversion
• Averages
• Output to Input conversions
One you have defined calculated points; they are available for selection when creating client and server maps
and configuring alarms. During runtime, calculated point values are presented to the operator on the
Automation tab on the Point Details page.
Mapped Points
The Mapped Points tab on the Calculator page is used to select system points to be used as variables within
Calculator expressions.
The left pane displays a tree view listing of the data points available in the MCP system point database from
which you can select as mapped points. Mapped points are organized under the data type sub-tabs: Analog
Input, Analog Output, Digital Input, Digital Output, Accumulator, and Text.
Mapped points that are selected in the tree view are added to the list in the center of the screen. Double-click
the Alias field within this list to change the Calculator alias for the point (the alias is only used within the Calculator
application). The alias field can be 1 to 126 ASCII characters.
To delete a point, select the point and click the Delete button. Click the Delete NE button to remove all non-
existent points that are referenced. Non-existent points may occur if a device containing the referenced data
points is deleted from the MCP.
Expressions
The Expressions tab on the Calculator page is used to create, modify and delete calculated expressions. Up to
10000 Calculator Expressions can be created.
You construct expressions by combining operands and operators to produce a resulting point. You can use any
defined reference points in expressions. Operands can include constants, system data points and Quality
attributes. Operators include mathematical, logical, and bit-wise operators. The expressions also define the Point
Names and Data Types that are used to represent the resulting evaluation.
» To create an expression:
1. Click the button.
2. On the New Expression window, select the type of expression you want to create and click OK.
3. The new expression is added to the left pane. Select it to display the configuration window.
» To delete an expression:
1. Select the expression in the left pane.
2. Click the button. The expression is deleted.
The following related actions can be performed to configure:
• Evaluations
• Timers
• Analog assignments
• Digital assignments
• Quality conversions
• Type conversions
• Averages
• Output to Input conversions
Evaluations
Evaluation expressions perform operations on referenced points and store the result in a Calculator-owned input
point.
The following operations are supported in evaluation expressions:
• Math operations
• Logical operations
• Bit-wise operations
• Request Type operations
• If-Then-Else construct
Evaluation expressions are re-evaluated whenever a data change event is issued on a point referenced by the
expression. Quality changes on referenced points only cause re-evaluation if the expression is converting the
changed quality flag into a digital input, or if the quality change indicates that the referenced point is coming
online or has had communications restored. The Calculator monitors the quality of referenced points for changes
in the Questionable and Invalid quality flags. If any referenced point becomes Invalid or Questionable, the
resulting point for any expression that includes that referenced point becomes Invalid.
Table 6-151: Evaluation Fields
Field Description
Name A system name to describe this expression within the Calculator application. Range is up
to 128 alphanumeric characters.
Target Point Type The type of point that is returned as the output of the expression.
Target Point The name of the point that is returned as the output of the expression. This name must
be unique across all data types.
Target Alias Enter a short name to reference the output point within Calculator. Must be unique across
all data types. Used as point description in Available Points list. Supported characters are:
any combination of up to 126 characters using "a" through "z", "0" through "9", "_"
(underscore) and "-" (hyphen), followed by a suffix indicating the data type of the
referenced point (ai, ao, di, do, acc, or txt). Spaces are not allowed. Suggested format is
<a to z><1 to 9999><datatype>. For example, scada43di.
Range is up to 126 alphanumeric characters.
Default is Xai or Xdi, depending on the Target Point Type, where X is incremented from 1.
Result Point Description A user-defined description of the expression.
Expression Notes Internal notes regarding the expression.
Expression The formula used to calculate the expression. To insert a mapped point, calculator point,
or expression, expand the tree menu and double-click the entry.
Example Expressions
Table 6-155: Expressions - Example
Expression Description
3di && (4di || 5di) If DI3 is 1 and either DI 4 or DI 5 is 1 then the result of the expression is set to 1.
Otherwise, if DI 3 is 0 or both DI 4 and DI 5 are 0 then the result of the expression is set 0.
Where, DI 3, DI 4 and DI 5 are the mapped/referenced points.
(RT (10do) == TR)? When a trip command is received on calculator digital output point DO 10, set the result of
0:1 the expression to 0.
For any other commands, set to 1.
(6di | 7di | 8di) ?( If any of DI 6, DI 7, or DI 8 are 1, set the result of the expression to (4ai + 1000).
4ai + 1000 ) : 0 If all are zero, set the result of the expression to zero.
(RT (11do) == PU)? Whenever a pulse on operation is received on calculator digital output point DO 11, set the
5ai result of the expression to 5ai. Otherwise, no operation.
(6ai > 5000)? 1: (RT If AI 6 is greater than 5000, set the result of the expression to 1.
(12do) == ANY)? 0 Otherwise, if AI 6 is less than or equal to 5000 and when any command is issued on
calculator digital output point DO 12, set the result of the expression to 0.
Math Operations
The Calculator handles mathematical operations as follows:
• A mathematical operation is always evaluated using floating-point arithmetic.
• If binary values are used as operands for a math operation, then TRUE is interpreted as 1 and FALSE as zero.
• Mathematical operators are evaluated left to right only. Order of precedence is not enforced on
mathematical expressions unless parentheses are used.
The Calculator supports the following math operators:
Table 6-156: Math Operations
Logical Operations
The Calculator handles logical operations as follows:
• All operands are evaluated as binary values before performing the logical operation.
• A logical operation evaluates to TRUE or FALSE.
• All non-zero values are interpreted as TRUE and zero values as FALSE.
• If the output is later used in a mathematical operation, TRUE is interpreted as 1 and FALSE as zero.
The Calculator supports the following logical operators:
Table 6-157: Logical Operations
Logical operators and mathematical operators can be combined to create if/then/else-style statements.
For example, the simple construct if a then b else c, where a is a logical operation, could be expressed as ((a) * b)
+ ((!a) * c) in the Calculator. Since logical operations always evaluate to 1 or 0, the multiplication effectively
'cancels' the result for the logical operation that is not true.
NOTE: The weakness of this approach is that the "else" case must always be defined. It is not possible to define
a simple "if/then" construct with this method.
Bit-Wise Operations
The Calculator handles bit-wise operations as follows:
• The output of a bit-wise operation is always a 32-bit integer value.
• A floating-point value is converted to a 32-bit integer by dropping all data after the decimal before
performing a bit-wise operation.
• If the expression stores the final value in a digital input, then a non-zero value is interpreted as TRUE,
while a zero value is interpreted as FALSE, unless a specific bit position is specified in the result to be
selected as the DI state.
The Calculator supports the following bit-wise operators:
Table 6-158: Bit-Wise Operations
NOTE: If the request type is tested against ANY, then any control operation except NO evaluates to 1 .
If-Then-Else Construct
The Calculator supports the If-Then-Else construct <condition> ? <value if true> : <value if false>. The construct
evaluates to value if true if the condition results in a non-zero value, or to value if false if the condition results in
zero.
You may leave either of the value fields empty. If this is done and the condition selects the empty value, the
construct is considered not to have changed and no further evaluation is carried out. The syntax of the construct
is either <condition> ? <value if true> or <condition> ? : <value if false>
Timers
The Calculator provides timer functionality to a resolution of 1 second. A timer operation is defined by two hold
times: rising edge (FALSE to TRUE) and falling edge (TRUE to FALSE). Hold times can be positive or zero. When the
result of a binary expression changes, Calculator starts a timer based on the defined hold times. If the value of
the binary expression stays constant for the entire timer duration, then the value of the timer expression
evaluates to TRUE.
For example, if you want a Calculator digital input to turn ON when digital inputs DI22 and DI54 are the same
value for more than 10 seconds, use the following settings:
• Output point type is Digital Input
• The timer expression is (DI22 == DI54)
• The Rising Edge Time is 10 and the Falling Edge Time is 0.
Result: The output of Calculator digital input will turn ON after 10 seconds.
Table 6-160: Timer Operations
Analog Assignments
Analog Assignment expressions receive commands on Calculator-owned analog output and input points and
translate these into operations on mapped analog data output points. Quality changes on the Calculator and
referenced points are monitored in case the change in quality impacts the Calculator expression. Assignment
expressions support the same syntax as evaluation expressions on the right-hand side of the expression.
Fields
Table 6-163: Analog Assignments
NOTE: It is recommended to use braces around negative numbers in the expressions. e.g., (-1234).)
Digital Assignments
Digital Assignment expressions receive commands on Calculator-owned digital output and input points and
translate these into operations on referenced system digital output points. Quality changes on the Calculator
and referenced points are monitored in case the change in quality impacts the Calculator expression. Assignment
expressions support the same syntax as evaluation expressions on the right-hand side of the expression.
The alias of any mapped analog input or Calculator-owned analog output point can be used for the on duration,
off duration, and number of operations variables. If aliases are used, the current value of the point associated
with the alias is used as the value of the parameter (refer to the Example Expressions).
» To insert a control output parameter:
• Click the Ctrl Spec button on the Expression Builder.
Table 6-167: Digital Assignments - Control Type
Field Description
Name A system name to describe this expression within the Calculator application. Range is up
to 128 alphanumeric characters.
Control Routing The possible options are:
• None: The functionality of the Digital assignment expression types is the same as
Analog assignment. So, a command will be issued to the target DO point based on
the result of the expression and according to control type and other configuration
parameters.
• On Target Point: Only “ON” type commands are routed to another DO. “OFF” type
commands are not routed.
• Off Target Point: Only “OFF” type commands are routed to another DO. “ON” type
commands are not routed.
• Both Target Points: Both “ON” and “OFF” type commands are routed to different
targets.
The default value selected for Control Routing is None - i.e. Digital assignment will perform
no routing.
Target Point This point receives all operation commands when the Control Routing parameter is set to
None.
ON Target Point This receives ’Close/Latch ON/Pulse ON’ commands if the result of the Expression is TRUE.
(When Control Routing No command is received if the result of the Expression is FALSE.
Parameter is set to ON
Target Point / Both
Target Points)
OFF Target Point This point receives ’Trip/Latch OFF/Pulse ON’ commands if the result of the Expression is
(When Control Routing FALSE. No command is received if the result of the Expression is TRUE.
Parameter is set to OFF Pulse OFF commands can be issued only when Control Routing is not set to None.
Target Point/Both
Target Points)
Field Description
Control Type Control type is used if your assignment expression:
(When Control Routing • Evaluates to a true or false value
Parameter is set to In this case, the control type instructs Calculator how to interpret the expression result
None) based on the following criteria:
Control Type Control Type Issued
Field Description
Control Type On Target Point Control type is used if your assignment expression:
(When Control Routing • Is meant to translate a control operation from a Calculator-owned digital output into
Parameter is set to On another type and pass it on to a mapped digital output if you are not using inline
Target Point) control specifications. As noted above, if you use an inline control specification, the
command defined inline overrides the configured control type.
The On Target Point Control Type instructs Calculator on how to interpret the expression
result based on the following criteria:
On Target Point On Target Point Control Type Issued
Control Type When expression changes When expression changes to
to True False
Inverted Latch Latch OFF No operation
Latch Latch ON No operation
Pulse Pulse ON No operation
Trip/Close Close No operation
Field Description
Control Type Off Target Point Control type is used if:
(When Control Routing • Your assignment expression is meant to translate a control operation from a
Parameter is set to Off Calculator-owned digital output into another type and pass it on to a mapped digital
Target Point) output if you aren't using inline control specifications. As noted above, if you use an
inline control specification, the command defined inline overrides the configured
control type.
The Off-Target Point Control Type instructs Calculator on how to interpret the expression
result based on the following criteria:
Off Target Off Target Point Control Type Issued
Point Control When expression changes to When expression changes
Type True to False
Inverted Latch No operation Latch OFF
Latch No operation Latch ON
Pulse No operation Pulse ON
Trip/Close No operation Trip
Control Type Both Target Points Control type is used if your assignment expression:
(When Control Routing • Is meant to translate a control operation from a Calculator-owned digital output into
Parameter is set to Both another type and pass it on to two mapped digital outputs (either same DOs or
Target Points) different Dos), if you are not using inline control specifications. As noted above, if you
use an inline control specification, the command defined inline overrides the
configured control type.
The Both Target Points Control Type instructs Calculator on how to interpret the
expression result based on the following criteria:
On Target On Target Point Control Type Issued
Point Control When expression changes When expression changes
Type to True to False
Inverted Latch Latch OFF No operation
Latch Latch ON No operation
Pulse Pulse ON No operation
Trip/Close Close No operation
The resulting actions will be a combination of configuration On Target Point Control Type
and Off Point Target Control Types.
Control Type Control Type Issued to On Target DO Point
Received for Control Type Control Type Control Type Control Type is
Owned DO Point is Latch is Pulse is Trip/Close Inverted Latch
(i.e. the single
mapped in the
Expression field)
Latch ON Latch ON Pulse ON Close Latch OFF
Pulse ON Latch ON Pulse ON Close Latch OFF
Close Latch ON Pulse ON Close Latch OFF
Latch OFF No operation No operation No operation No operation
Pulse OFF No operation No operation No operation No operation
Trip No operation No operation No operation No operation
Latch ON No operation No operation No operation No operation
Pulse ON No operation No operation No operation No operation
Close No operation No operation No operation No operation
Latch OFF Latch ON Pulse ON Trip Latch OFF
Pulse OFF Latch ON Pulse ON Trip Latch OFF
Trip Latch ON Pulse ON Trip Latch OFF
The default type is Trip-Close.
Field Description
Expression Notes Internal notes regarding the expression.
Expression The formula used to calculate the expression. To insert a mapped point, calculator point,
or expression, expand the tree menu and double-click the entry.
Expression 0di
Expression 3do
Expression Notes When the 1di value is 0 then the Trip command is sent to 3do. When
the 1di value is 1, then no command is sent to 3do.
Example Expressions
Table 6-172: Expressions - Example
Expression Description
!14do Any command on the calculator owned point DO 14 is inverted and passed on to
the configured mapped DO point according to the control type and other
configuration parameters.
(RT (15do) != CL) ? 1 : 0 Any command on the calculator owned point DO 15 except CLOSE is passed
through to configured mapped DO point according to the control type and other
configuration parameters.
(0di) ? {TR, 100, 0 ,1} : 1di When DI 0 is true, a 100-millisecond trip command will be sent to the configured
mapped DO point. And, when DI 0 is false the value of 1di will be translated
according to the control type and other configuration parameters.
(1ai< 1000) ? 16do When AI 1 is less than 1000, any command calculator owned point DO 16 is
passed through to the configured mapped DO point according to the control type
and other configuration parameters.
And, If AI 1 is greater than or equal to 1000, any command on DO 16 is ignored.
(4di) ? {PU, 1ai, 2ai, 3ai} When mapped point DI 4 goes from false to true, send a Pulse ON command to
configured mapped DO with On Duration equal to the current value of AI 1, an
OFF Duration equal to the current value of AI 2, and a number of operations are
equal to the current value of AI 3.
Quality Conversions
Converted points are a special class of pseudo points that are created based on an actual system point. Quality
conversions take a system point and report a binary TRUE or FALSE based on a certain quality flag within that
point. For example, if you create an OFFLINE quality point conversion based on analog point called AI_000,
whenever AI_000 is offline, the quality conversion points you created is TRUE. When AI_000 is online, the quality
conversion point is FALSE.
• RESTART
• SCAN_INHIBIT – Asserts Questionable and Old Data flags
• SECONDARY_SOURCE
• SECONDARY_SOURCE_OFFLINE
• TAGGED
• TEST
• TIME_SYNC
• ZOMBIE - Asserts when the Zombie quality attribute of the mapped point is set
Table 6-173: Quality Conversions
Field Description
Name Enter a text description of the converted point in the Calculator map. Appears as the
Point Description on the Point Details page.
Range is up to 128 alphanumeric characters.
Quality Attribute Selected quality flag to which the reference point is forced.
Source Point The input point for the expression.
Target Point The name of the point that is returned as the output of the expression. This name must
be unique across all data types.
Target Alias Enter a short name to reference the conversion point in the Calculator expression. Must
be unique across all data types. Used as point description in Available Points list.
Supported characters are: any combination of up to 126 characters using "a" through
"z", "0" through "9", "_" (underscore) and "-" (hyphen), followed by a suffix indicating the
data type of the referenced point (ai, ao, di, do, acc, or txt). Spaces are not allowed.
Suggested format is <a to z><1 to 9999><datatype>. For example, scada43di.
Range is up to 126 alphanumeric characters.
Default is Xdi, where X is incremented from 1.
Result Point A user-defined description of the expression.
Description
Expression Notes Internal notes regarding the expression.
Type Conversions
Converted points are a special class of pseudo points that are created based on an actual system point. Type
conversion points change points from binary to analog format, or from analog to binary. For example, if you
create a binary input type conversion from an analog input, a new point is created where the value of the analog
input value is converted to a binary TRUE or FALSE. The MCP provides the following type conversions:
Table 6-176: Type Conversions
Field Description
Analog input to Floating-point values are truncated to integers. The bit position specifies which
digital input resulting integer is used to determine the state of the digital input.
Digital input to The digital input state is converted to the value 1 (TRUE) or 0 (FALSE)
analog input
Analog output to Value of the analog input reflects the current Set Point Value of the analog output
analog input
Digital output to State of the digital input reflects the current state of the digital output
digital input
Accumulator to The value type of the references point specifies whether the running or frozen value
analog input of the accumulator is used in the expression
Accumulator to The value type of the referenced points specifies whether the running or frozen value
digital input of the accumulator is used in the expression. The bit position specifies which
resulting integer is used to determine the state of the digital input.
Text to analog input ASCII text is converted into a floating-point value
Field Description
Name Enter a text description of the conversion point in the Calculator map. Appears as Point
Description on Point Details page. Range is up to 128 alphanumeric characters. Default
is tcX, where X is incremented from 1.
Source Point The input point for the expression.
Target Point Type The type of point that is returned as the output of the expression.
Target Point The name of the point that is returned as the output of the expression. This name must
be unique across all data types.
Target Alias Enter a short name to reference the conversion point in the Calculator expression. Must
be unique across all data types. Used as point description in Available Points list.
Supported characters are: any combination of up to 126 characters using "a" through "z",
"0" through "9", "_" (underscore) and "-" (hyphen), followed by a suffix indicating the data
type of the referenced point (ai, ao, di, do, acc, or txt). Spaces are not allowed. Suggested
format is <a to z><1 to 9999><datatype>. For example, scada43di.
Range is up to 126 alphanumeric characters.
Default is Xai or Xdi depending on the Target Point Type, where X is incremented from 1.
Value Type (ACC to AI, The type of accumulator points to use in the expression.
ACC to DI only)
Bit Position (AI to DI, The integer within the value returned from the source point used to determine the state
ACC to DI only) of the digital input.
Result Point A user-defined description of the expression.
Description
Expression Notes Internal notes regarding the expression.
Calculator Averages
Calculator supports both standard and time-weighted averaging on selected analog inputs.
Fields
Table 6-180: Calculator Averages
Field Description
Name A system name to describe this expression within the Calculator application. Range is up to
128 alphanumeric characters.
Average Type Select the type of averaging to perform:
• Block averaging is a basic arithmetic average.
• Time-Weighted gives an average that considers the amount of time the point stayed at
each value. Time-Weighted average is used to reduce the influence of infrequent
outliers.
Source Point The analog input to be averaged.
Target Point The name of the source point that is created for this expression. This name must be unique
across all data types.
Target Alias Enter a short name to reference the output point within Calculator. Must be unique across
all data types. Used as point description in Available Points list. Supported characters are:
any combination of up to 126 characters using "a" through "z", "0" through "9", "_"
(underscore) and "-" (hyphen), followed by a suffix indicating the data type of the referenced
Field Description
point (ai). Spaces are not allowed. Suggested format is <a to z><1 to 9999><datatype>. For
example, scada43ai. Range is up to 120 alphanumeric characters. Default is Xai, where X is
incremented from 1.
Alignment The time of day to align the period to. Periods are positioned such that a new period begins
each day at the alignment time. For example, if the alignment time is set to 12:00 pm, a new
period is aligned to begin at this time every day.
Sub Block Divisor How many segments to divide the period into. The minimum value is 1.
If a value greater than 1 is provided, Calculator averages the analog input over the segment
instead of the full averaging period. Calculator reports the average of the last n fractional
averages, where n is the sub-block divisor.
Sliding Select if a sliding window should be used.
If not selected, Calculator reports the average at every full averaging interval.
For example, if you specify an averaging interval of 1 hour and a sub-block divisor of 4,
Calculator calculates the average of the analog input every 15 minutes; it reports this
average every 15 minutes if a sliding window is used, or every hour if set to use a non-
sliding window.
Value Exclusion An enable/disable flag for excluding or not excluding the range of sample values for the
averaging.
Value Exclusion: A Floating-point minimum value for the value exclusion.
Min Default is -0.5.
Value Exclusion: A Floating-point maximum value for the value exclusion.
Max Default is +0.5.
Result Point A user-defined description of the expression.
Description
Period Enter the size of the averaging interval. The size of the period must divide evenly into the
alignment interval, defined above.
For example, in the figure above, the period is set to 4 hours. Since the alignment period is
12:00 pm, there are 6 periods in a full day. For this reason, a period size of 5 hours would
not be accepted since this would divide into 2.4 periods per day and would not coincide
with the Alignment value.
Expression Notes Internal notes regarding the expression.
Field Description
Name Enter a text description of the conversion point in the Calculator map. Appears as
Point Description on the Point Details page. Range is up to 128 alphanumeric
characters.
Source Point Type The type of point that is returned as the output of the expression, either Analog
Output or Digital Output.
Source Point A user-defined name that can be used for quick indexing and filtering. Maximum 66
characters, ASCII only. The default value is the next available system point reference.
Field Description
Source Alias Enter a short name to reference the conversion point in the Calculator expression.
Must be unique across all data types. Used as point description in Available Points
list. Supported characters are: any combination of up to 126 characters using "a"
through "z", "0" through "9", "_" (underscore) and "-" (hyphen), followed by a suffix
indicating the data type of the referenced point (ai or do). Spaces are not allowed.
Suggested format is <a to z><1 to 9999><datatype>. For example, scada43do.
Range is up to 126 alphanumeric characters.
Default is the next available auto-generated alias, Xao or Xdo depending on the
selected Source Point Type, where X is incremented from 1.
Source Point Description A user-defined description of the expression.
Expression Notes Internal notes regarding the expression.
Target Point Type The type of point that is used as the input of the expression, Digital Input (if digital
output is selected as the result point type) or Accumulator, Analog Input, or Digital
Input (if analog output is selected as the result point type).
Target Point A user-defined name that can be used for quick indexing and filtering. Maximum 66
characters, ASCII only.
Target Alias The alias of the point that is used as the input of the expression.
Input Point Reference The input point to be used by the expression.
Bits to Map (AO to DI only) The number of input points to concatenate as the expression's digital input.
Result Point Description A user-defined description of the expression.
Calculator Points
Calculator points can be used to provide input into one or more expressions. Once defined on the Calculator
Points page, these analog output and digital output points are shown within the point picker tree on the
Expression Builder.
Table 6-187: Calculator Points
Field Description
Analog Output and The type of output point to be made available.
Digital Output tabs
Source Reference The unique name of the source point. This field is automatically assigned and cannot be
edited.
Alias Enter a short name to reference the output point within Calculator. Must be unique across
all data types. Used as point description in Available Points list. Supported characters are:
any combination of up to 126 characters using "a" through "z", "0" through "9", "_"
(underscore) and "-" (hyphen), followed by a suffix indicating the data type of the
referenced point (ai, ao, di, do, acc, or txt). Spaces are not allowed. Suggested format is <a
to z><1 to 9999><datatype>. For example, scada43di. Range is up to 126 alphanumeric
characters. Default is Xai, Xdi, Xdo, Xacc, Xtxt, where X is incremented from 1.
Source Description A user-defined description of the expression.
Field Description
Data Change Time Can be set to:
Tag • Use evaluation time
When this option is selected, Calculator uses the time stamp of the trigger
event to time stamp the resulting point from an expression (if the expression
evaluation results in a changed point value).
• Use trigger event
When this option is selected, Calculator time stamps the resulting point with the
time reported by the system clock after the expression has been evaluated.
The default setting is Use trigger event.
Allow Controls At Can be set to:
Startup • Only Pseudo Points
When this option is selected, Calculator at startup allows the controls to the
mapped pseudo points only.
• All Points
When this option is selected, Calculator at startup allows the controls to all
the mapped points.
• Disabled
When this option is selected, Calculator does not allow the controls at startup.
The default value is Only Pseudo Points.
Order of precedence
No special precedence is enforced on any Calculator expression, except where parentheses have been used. The
Calculator evaluates parts of any expression that are within parentheses first, and then evaluate the rest of the
expression in a left to right manner. The Calculator allows up to 10 levels of nested parentheses. Evaluation of
nested statements occurs in an inward-to-outward manner where the more deeply nested parts of the
expression are evaluated first.
For example, in the expression x = Part_1(Part_2)Part_3(Part_4(Part_5(Part_6))Part_7)Part_8((Part_9)Part_10)
the correct order of evaluation is Part_2; Part_6; Part_5; Part_4; Part_7; Part_9; Part_10; Part_1; Part_3; Part_8.
White space
You may insert any number of spaces between operators and operands; the Calculator ignores these spaces.
Point Suppressed quality flag are provided instead. This can be useful during maintenance operations to prevent
spurious OFFLINE alarms and false readings while devices are powered off or disconnected.
When input points change their value while suppressed, and the suppression is later removed – the resulting
reported event has the timestamp of the removal action.
You can add any number of input points to a point suppression group, but any input may only be included in a
maximum of one group at any time. Local commands can be executed on suppressed points. However, you do
not see the effects of the local command until suppression is removed.
Feeders tab
Table 6-189: Feeder Tab
Field Description
Feeder Name A user-defined name that can be used for quick indexing and filtering. Maximum 66
characters, ASCII only.
Zone Assignment The Load Shed zone that the feeder is assigned to. Zones can be created on the
Zones sub-tab.
Description A user-defined block of text that provides a detailed and localized description of the
group. Maximum 128 characters.
Point Selection Area You can select digital output system points to add to the feeder group using the
system point tree. Click the checkbox to the left of a point or group name to add a
point or a group of points to the group. Points included in the group are shown at the
right-hand side of the point selection area. To remove a point, uncheck the
appropriate box in the system point tree or highlight the point and click the Delete
button. Click the Delete NE to remove any points that are not valid (that is, points that
have been deleted from the system database after they were included in the group.
In the event a load shed command is issued to the zone that this feeder is a member of, all the digital outputs
selected here receive a TRIP control command.
Zones tab
Table 6-190: Zones Tab
Field Description
Zone Name A user-defined name that can be used for quick indexing and filtering. Maximum 66
characters, ASCII only.
Zone Description A user-defined block of text that provides a detailed and localized description of the
group. Maximum 128 characters.
Load Shed Trigger Point A point selection tree that allows you to choose the digital input point to be used as
the load shed trigger point. The feeders associated with this group are tripped when
this point transitions to the configured Trigger state.
Trigger Point Description A detailed and localized description of the trigger point. This field is not editable.
Trigger State The binary state used to trigger the load shed point selected.
Remote Logs
File RemoteLogs.txt
Syslog Client
The MCP generates internally produced security events in syslog format (i.e., RFC5424) as per specifications of
IEC 62351-14. In addition, it also generates internally produced application log events in syslog format (i.e.,
RFC3164).
The Syslog Client can relay the MCP locally buffered remote IED Syslogs, when the Rsyslog service is enabled in
the MCP.
When the Syslog Client application is configured, it enables the G500 to transfer these (security, application &
remote IED syslog) events to remote syslog server over TCP or UDP.
3. Go to the Connections tab and click the icon to add a new connection.
4. In the New Connections window, choose Network Connection. From the Network Connection Type
dropdown, choose Syslog Client.
Figure 6-4: Network Connection Type – Syslog Client
5. Click OK and the Syslog Client is successfully added under the Network Connections.
Note: : The Remote Syslog Server shall be accessible via Predix EdgeManager IP. To configure the Edge
Manager IP, refer to the EdgeManager Connectivity Configuration detailed under the Configure Network
Interfaces topic of the Chapter 5 -MCP Settings GUI.
Field Description
Enabled When this checkbox is enabled, the Syslog client application is configured for
transfer of syslog events to remote syslog server.
Network Protocol This parameter defines the supported protocols to transfer the syslog events to
remote syslog server either by TCP or by UDP.
Primary Server IP Supported protocols are TCP and UDP.
The MCP allows to configure multiple remote syslog server connection details. This
parameter defines the primary remote syslog server IP.
Note: The remote syslog server IP shall be reachable via EdgeManager IP.
Primary Server Port This parameter defines the primary remote syslog server Port number.
Secondary Server IP The MCP allows to configure multiple remote syslog server connection details. This
parameter defines the secondary remote syslog server IP.
Note: The remote syslog server IP shall be reachable via EdgeManager IP
Secondary Server Port This parameter defines the secondary remote syslog server Port number.
Remote Logs
Table 6-192: Logs Supported - Remote
Logs Origin Logs Data Send to Syslog Server Types of Minimum Severity
Remote Remote IED When this checkbox is enabled, all the Supported Values:
Acquired Syslogs Remote IED Acquired syslog events • Alarm
whose severity is same or higher than • Error
the Minimum Severity configured, will
• Warning
be transferred to configured remote
syslog server. • Notice
• Info
The default value is Warning.
Local Logs
Table 6-193: Logs Supported - Local
Logs Origin Logs Data Send to Syslog Server Types of Minimum Severity
User Activity Log When this checkbox is enabled, all the Supported Values:
User Activity application log events • Info
whose severity is same or higher than The only value is Info.
the Minimum Severity configured, will
be transferred to configured remote
syslog server.
Diagnostic Log When this checkbox is enabled, all the Supported Values:
diagnostic application log events whose • Alarm
severity is same or higher than the • Error
Minimum Severity configured, will be
• Warning
transferred to configured remote syslog
server. • Notice
• Info
Local The default value is Warning.
Control When this checkbox is enabled, all the Supported Values:
control application log events whose • Info
severity is same or higher than the The only value is Info.
Minimum Severity configured, will be
transferred to configured remote syslog
server.
Firewall When this checkbox is enabled, all the Supported Values:
firewall application log events whose • Info
severity is same or more than the The only value is Info.
Minimum Severity configured, will be
transferred to configured remote syslog
server.
Logs Origin Logs Data Send to Syslog Server Types of Minimum Severity
System Event When this checkbox is enabled, all the Supported Values:
system event application log events • Alarm
whose severity is same or more than • Error
the Minimum Severity configured, will
• Warning
be transferred to configured remote
syslog server. • Notice
• Info
The default value is Warning.
OpenVPN When this checkbox is enabled, all the Supported Values:
OpenVPN application log events whose • Alarm
severity is same or more than the • Error
Minimum Severity configured, will be
• Warning
transferred to configured remote syslog
server. • Notice
• Info
The default value is Warning.
ARRM When this checkbox is enabled, all the Supported Values:
ARRM application log events whose • Info
severity is same or more than the The only value is Info.
Minimum Severity configured, will be
transferred to configured remote syslog
server.
Analog Report When this checkbox is enabled, all the Supported Values:
Analog Report application log events • Alarm
whose severity is same or more than • Error
the Minimum Severity configured, will
• Warning
be transferred to configured remote
syslog server. • Notice
• Info
The default value is Warning.
IEC62351-14 When this checkbox is enabled, all the Supported Values:
internal security events whose severity • Alarm
is same or more than the Minimum • Error
Severity configured, will be transferred
• Warning
to configured remote syslog server.
• Notice
• Info
The default value is Warning.
Configure Datalogger
Report Types
Continuous Reports
Continuous reports record all events on the selected points.
» To select a point to log:
1. Expand the point tree by clicking the +.
2. Click the checkbox next to the point name. If a folder is selected, all points that fall under that group are
added to the report.
3. Enter the deadband setting by double clicking the Deadband cell and entering the desired value.
Table 6-194: Continuous Reports
Field Description
Name User-defined name to refer to the report.
Log Full Action When the maximum number of records is reached, define how incoming records are to be
handled.
Overwrite Oldest Data replaces the oldest entries in the log with the new incoming records;
Reject Newest Data ceases recording incoming records until space is made available (through
the Manage Reports window of the Data Logger).
Max Number of Enter the maximum number of records that should be recorded within this report. Note that
Records the number of records is divided among the selected points. Refer to Storage Allocation for
information on configuring MCP storage space available for reports.
Enable Trigger When selected, the Data Logger monitors a defined digital input point for status changes.
Point When a status change occurs, log recording begins; it ends when the status changes back.
Trigger Point Select a digital input to trigger recording of the report.
Go State If Enable Trigger Point is selected, select the state that the point must enter to begin recording.
Periodic Reports
Periodic reports record current value, minimum value, or maximum value for the selected points within a defined
interval:
» To select a point to log:
1. Expand the point tree by clicking the +.
2. Click the checkbox next to the point name. If a folder is selected, all points that fall under that group are
added to the report.
3. Enter the deadband setting by double clicking the Deadband cell and entering the desired value.
Table 6-195: Periodic Reports
Field Description
Name User-defined name to refer to the report.
Log Full Action When the maximum number of records is reached, define how incoming records are handled.
Overwrite Oldest Data replaces the oldest entries in the log with the new incoming records;
Reject Newest Data ceases recording incoming records until space is made available (through
the Manage Reports window of the Data Logger).
Max Number of Enter the maximum number of records that should be recorded within this report. Note that
Records the number of records is divided among the selected points. Refer to Storage Allocation for
information on configuring MCP storage space available for reports.
Periodic Value Select if you would like to record the current, minimum, or maximum values for selected points
at each interval.
Log Interval Select the type of interval. This value is combined with the Alignment value below to define the
interval length.
Interval The length of interval. For example, if the selected log interval is hours and the interval is 2, the
length of the interval is 2 hours.
Alignment The time of day to align the period to. Intervals are positioned to meet at the alignment value.
For example, if an Hours interval is selected and the alignment is set to xx:15, a new interval
begins at 15 minutes past each hour. If a Days interval is selected and the alignment is set to
8, a new interval begins at 8:00 am each day.
Enable Trigger When selected, the Data Logger monitors a defined digital input point for status changes.
Point When a status change occurs, log recording begins; it ends when the status changes back.
Trigger Point Select a digital input to trigger recording of the report.
Go State If Enable Trigger Point is selected, select the state that the point must enter to begin recording.
Field Description
Name User-defined name to refer to the report.
Field Description
Log Full Action When the maximum number of records is reached, define how incoming records are to be
handled.
Overwrite Oldest Data replaces the oldest entries in the log with the new incoming records;
Reject Newest Data ceases recording incoming records until space is made available (through
the Manage Reports window of the Data Logger).
Max Number of Enter the maximum number of records that should be recorded within this report. Note that
Records the number of records is divided among the selected points. Refer to Storage Allocation for
information on configuring MCP storage space available for reports.
Enable Trigger When selected, the Data Logger monitors a defined digital input point for status changes.
Point When a status change occurs, log recording begins; it =ends when the status changes back.
Trigger Point Select a digital input to trigger recording of the report.
Go State If Enable Trigger Point is selected, select the state that the point must enter to begin recording.
Validation Time
Out of range logging allows for an optional validation period. This is used to account for instances where a
reading may be incorrect for one scan before the device corrects itself. If this feature is enabled, the following
occurs:
1. If a new event is in the same reporting range as the previously reported value, the new event is accepted
and recorded.
2. If a new event is in a different reporting range than the previously reported value, the validation timer is
started:
a) If the validation timer expires with no new events being reported, the event being validated is
accepted and recorded
b) If a new event is reported before the timer expires, and it falls within the same range as the event
being validated, both are accepted and recorded, and the validation timer is reset
c) If a new event is reported before the timer expires, and it falls outside the range of the event being
validated, the event being validated is discarded, the validation timer is reset, and the new event
starts at step 2.
Storage Allocation
Save Report
The Save Report window allows you to export a .csv (comma separated values) file from the Data Logger. The
CSV file contains point attributes and values for the entire timeframe shown in the Summary Area.
» To save a report:
1. Click Save Report.
2. On the CSV Report Options window, enable or disable saving vertex data in the report. Click OK.
3. Browse to the location you want to store the report file.
4. Enter a file name ending in .csv and click Save.
NOTES:
• Historic records loaded from other reports are not saved within the new report file.
• If no records exist within the selected timeframe, the exported file will contain one entry that shows the
first available value before the selected start time.
Vertex Data
When saving reports, Data Logger gives you the option of including or excluding vertex data from the file. Vertex
data is the collection of x and y coordinates that comprise a plotted trend. When a report is saved without vertex
data, only the properties of the report (configured trends, scales, pen colors, axis settings, etc.) are saved, not the
data within the report itself.
Load Report
The Load Report window allows you to import a .csv (comma separated values) file previously exported from the
Data Logger.
» To load a report:
1. Click Load Report.
2. If vertex data has been saved to the report:
a) On the CSV Report Options window, enable or disable loading of vertex data from the report.
b) Click OK.
3. Browse to the report file you want to display and click Open.
Vertex Data
When loading reports, Data Logger gives you the option of importing or ignoring vertex data within the file. Vertex
data is the collection of x and y coordinates that comprise a plotted trend. When a report is loaded containing
vertex data, the trends appear on the chart area as they appeared when the file was saved.
NOTE: When a historic report is loaded, No End Date is automatically unchecked, and auto-trending is disabled.
When a report is loaded without vertex data, only the properties of the trend (scales, pen color, axis settings, etc.)
are restored that is, not the data within the trend itself. Data Logger attempts to reestablish a connection to the
live trends as defined in the report.
Manage Reports
The Manage Reports window allows you to view the amount of disk space consumed by report data as well as
pause and restart logging.
Table 6-197: Manage Reports
Field Description
# A non-editable row number to identify the trend.
Report ID The ID number of the report. Non-editable field that can be configured in the Data Logger tab of
the Configuration Tool.
Name The system name of the report. Non-editable field that can be configured in the Data Logger tab of
the Configuration Tool.
Historic? If a report is no longer configured within Data Logger but is loaded from a saved file, the checkbox
is selected to indicate this.
Active? Indicates if logging is currently enabled for the report type. Use the Activate and Deactivate buttons
to change this setting.
Activate Sends a command to the MCP to resume logging for this report type. The Active? field indicates
logging status.
Deactivate Sends a command to the MCP to pause logging for this report type. The Active? field indicates
logging status.
Capacity (B) The amount of disk space allocated to the report type, in bytes. Non-editable field that can be
configured in the Data Logger tab of the Configuration Tool.
Size (B) The amount of disk space currently consumed by the report, in bytes, including cache data.
Size (%) A percent-representation of the amount of capacity currently being consumed by the report type.
Empty Sends a command to the MCP to delete all records for this report type. Trend data already cached
and displayed within Data Logger is not deleted.
Select Points
The Select Points for Trending window lists the points that can be selected for graphing within the Data Logger.
» To select points for graphing:
1. Select the Start Date for the graph timeframe. If Earliest Record is selected, the timeframe of the graph
resizes to show the first recorded point.
2. Select the End Date for the graph timeframe. If No End Date is selected, Data Logger continually polls
the MCP for new data values on a regular basis and extends the graph as new data is received. No End
Date must be selected to enable Auto-Trend.
3. Select up to 10 points to graph by clicking the icon. When a point is selected, it is marked by a icon.
The icon indicates some child points of the item have been selected.
4. Click OK.
Result: Data Logger creates a graph of the selected points.
Data Logger supports the following record types:
• Periodic – Records one or more of the following for the selected analog input:
o Current value
o Minimum value
o Maximum value
Change Scaling
The Change Scales and Axes window allows you to change the way graphs are shown within the Data Logger.
Table 6-198: Change Scaling
Field Description
# A non-editable row number to identify the trend.
Color The color of line used when graphing the trend.
Report The system name of the report the trend belongs to. Non-editable field that can be configured in
the Data Logger tab of the Configuration Tool.
Point The system name of the point. Non-editable field that can be configured in the Data Logger tab of
the Configuration Tool.
Axis Label The user-configurable name shown when referencing the trend.
Unit A user-configurable label shown to indicate the type of data being graphed. This field is for display
only and does not affect the graphing of the point.
Auto-Range When enabled, the Min and Max fields are disabled, and the Y-axis on the Summary Area
automatically scales vertically to contain the trend's data.
Min The minimum Y-axis limit to be displayed. Enabling Auto-Range will override this setting.
Max The maximum Y-axis limit to be displayed. Enabling Auto-Range will override this setting.
Axis Display or hide the Y-axis scale for the trend. This affects the scales in both the Summary Area and
the Viewing Area.
Historic Shows whether the trend is live or has been loaded from a saved report.
Axis Sets • Individual: One axis per point in each report.
• Per Point Name: One axis per point. Each axis is shared between reports.
• Single: One shared axis for all points. This axis is shared between reports.
Analog Inputs
Table 6-199: Analog Inputs
300 Last Reset Cause Last Reset Cause Not supported in G100
Gets the Last Reset Cause of the Main Board.
Options (INT from 1 to 9):
• Reset Power Other, 1
• Reset Power Main, 2
• Reset Temp Module, 3
• Reset Temp Carrier, 4
• Reset WDT Module, 5
• Reset WDT Carrier, 6
• Reset System, 7
• Reset Carrier, 8
• Reset Power Button, 9
Note: value 0 is present only while initializing.
310 Chassis Intrusion Chassis Intrusion Not supported in G100
Status Status
Gets the Chassis Intrusion Status of the Board.
Options:
• Intrusion Safe (1),
• Intrusion Unsafe (2), or
• Intrusion Undefined (-1)
Note: value 0 is present only while initializing
or point is invalid.
400 Front Display State Front Display State Not supported in G100
State of the Display in BIT ENCODED values:
Options:
• Bit 0 = Display State OFF (bit = 0) / ON (bit
= 1) - this is the actual state, is not driven
by the saver setting
• Bit 1 = Display State OverTemp Warn (bit
=1)
501 Power Supply 1 (top) Power Supply 1 (top) Not supported in G100
Status Status
2118 PCIe B – COM Mode 8 COM mode is always Not supported in G100
RS232, indicate with 0
Forced to Bit 0 ON (RS232) when present
if not installed
2121 PCIe C – COM Mode 1 COM8 Mode Not supported in G100
(RS232,485 2w,485
Same as COM1
4w,Term_In,V_Out_OL)
2122 PCIe C – COM Mode 2 COM8 Mode Not supported in G100
(RS232,485 2w,485
Same as COM1
4w,Term_In,V_Out_OL)
2123 PCIe C – COM Mode 3 COM8 Mode Not supported in G100
(RS232,485 2w,485
Same as COM1
4w,Term_In,V_Out_OL)
2124 PCIe C – COM Mode 4 COM8 Mode Not supported in G100
(RS232,485 2w,485
Same as COM1
4w,Term_In,V_Out_OL)
2125 PCIe C – COM Mode 5 COM mode is always Not supported in G100
RS232, indicate with 0
Forced to Bit 0 ON (RS232) when present
if not installed
2126 PCIe C – COM Mode 6 COM mode is always Not supported in G100
RS232, indicate with 0
Forced to Bit 0 ON (RS232) when present
if not installed
2127 PCIe C – COM Mode 7 COM mode is always Not supported in G100
RS232, indicate with 0
Forced to Bit 0 ON (RS232) when present
if not installed
2128 PCIe C – COM Mode 8 COM mode is always Not supported in G100
RS232, indicate with 0
Forced to Bit 0 ON (RS232) when present
if not installed
3000 Time Sync Input Time Sync Input Indicates at runtime the Time Sync Input for
Source Source (None-SCADA, the MCP in real time.
PTP, IRIG-B, NTP, SNTP)
Values:
• Local/Not synch'ed/SCADA,
• PTP
• IRIG-B
• NTP
SCADA time synch is set in SSM points
because HAMA cannot access this type of
information.
3011 NET1-2 PTP Port State NET1-2 PTP Port State Not supported in G100
port state:
• PORT_MASTER
• PORT_SLAVE
• PORT_PASSIVE
• PORT_LISTENING
3012 NET3-4 PTP Port State NET3-4 PTP Port State Not supported in G100
port state:
• PORT_MASTER
• PORT_SLAVE
• PORT_PASSIVE
• PORT_LISTENING
• PORT_PRE_MASTER
• PORT_UNCALIBRATED
• PORT_FAULTY
• PORT_DISABLED
• PORT_INITIALIZING
3013 NET5-6 PTP Port State NET5-6 PTP Port State Not supported in G100
Port state:
• PORT_MASTER
• PORT_SLAVE
• PORT_PASSIVE
• PORT_LISTENING
• PORT_PRE_MASTER
• PORT_UNCALIBRATED
• PORT_FAULTY
• PORT_DISABLED
• PORT_INITIALIZING
3021 PTP Clock Class PTP Clock Class Not supported in G100
Indicates the grandmaster’s clock class if
synced. Otherwise, shows its default clock
class (187).
3100 IRIG-B IN Type IRIG-B IN Type (B002, Indicates the configured IRIG-B input signal
B006) type:
• B002
• B006
• Absent
3101 IRIG-B IN Time Zone IRIG-B IN Time Zone Not currently supported.
Offset to UTC Offset to UTC
3150 NTP Time Offset NTP Time Offset NTP Time Offset
3151 NTP IN Server NTP IN Server Selected Bit encoded AI to indicate communication
Selected with all configured NTP time sources.
• Bit 0 = ON for NTP Source 1
• Bit 1 = ON for NTP Source 2
3152 NTP IN Servers NTP IN Servers Quality Bit encoded AI to indicate quality with all
Quality configured NTP time sources.
• Bit 0 = ON for NTP Source 1 good quality
• Bit 1 = OK for NTP Source 2 good quality,
etc.
Digital Inputs
Table 6-200: Digital Inputs
Point ID Point Reference Point Description Values
Accumulator Points
Table 6-201: Accumulator Points
Point ID Point Reference Description
1701 ETH1-2 PRP/HSR Not supported in G100
lreCntTxA
PRP/HSR frames sent over port A
1702 ETH1-2 PRP/HSR Not supported in G100
lreCntTxB
PRP/HSR frames sent over port B
1703 ETH1-2 PRP/HSR Not supported in G100
lreCntTxC
number of frames sent towards the application interface
1704 ETH1-2 PRP/HSR Not supported in G100
lreCntErrWrongLanA
number of frames with the wrong LAN identifier received on port A
1705 ETH1-2 PRP/HSR Not supported in G100
lreCntErrWrongLanB
number of frames with the wrong LAN identifier received on port B
1706 ETH1-2 PRP/HSR Not supported in G100
lreCntErrWrongLanC
number of frames with the wrong LAN identifier received on the RedBox
interlink
1707 ETH1-2 PRP/HSR Not supported in G100
lreCntRxA
number of PRP/HSR frames received on port A
1708 ETH1-2 PRP/HSR Not supported in G100
lreCntRxB
number of PRP/HSR frames received on port B
1709 ETH1-2 PRP/HSR Not supported in G100
lreCntRxC
number of frames received from the application interface of a DANP or
DANH or
the number of number of frames received on the interlink of a RedBox
1710 ETH1-2 PRP/HSR Not supported in G100
lreCntErrorsA
number of frames with errors received on port A
1711 ETH1-2 PRP/HSR Not supported in G100
lreCntErrorsB
number of frames with errors received on port B
1712 ETH1-2 PRP/HSR Not supported in G100
lreCntErrorsC
number of frames with errors received on the application interface of a
DANP or DANH
or on the interlink of a RedBox
1716 ETH1-2 PRP/HSR Not supported in G100
lreCntDuplicateA
number of entries in the duplicate detection mechanism on port A for
which one single duplicate was received
1717 ETH1-2 PRP/HSR Not supported in G100
lreCntDuplicateB
number of entries in the duplicate detection mechanism on port B for
which one single duplicate was received
Text Points
Table 6-202: Text Points
Point Point Reference Point Description
ID
205 PCIe 3 Serial No. Not supported in G100
Serial No. of HDLC Card
206 PCIe 3 FPGA Version Not supported in G100
FPGA Version of HDLC Card
330 FPGA_VER Not supported in G100
FPGA Version details
331 CPLD_VER Not supported in G100
CPLD Version details
332 UEFI_VER Not supported in G100
UEFI Version details
503 Power Supply 1 (top) Id Not supported in G100
Power supply 1 (top) ID details
504 Power Supply 2 (Bottom) Id Not supported in G100
Power Supply 2 (Bottom) ID details
3800 PTP Grand Master clock ID Not supported in G100
PTP Grand Master clock ID
3801 PTP Master Clock ID Not supported in G100
PTP Master Clock ID
3802 PTP Output Clock ID Not supported in G100
PTP Output Clock ID
Server Maps
Server Configuration Overview
Creating Server Maps
Server Protocol Settings
Logical Remote Units
Communication Statistics
IEC 60870-5-101+104 Server
Info Object Settings
Bitstring Mapping Settings
Double Command Mapping Settings
Double Point Mapping Settings
Integrated Total Mapping Settings
Measurand Mapping Settings
Packed Single Point Mapping Settings
Regulating Command Mapping Settings
Root Directory Mapping Settings
Setpoint Command Mapping Settings
Single Command Mapping Settings
Single Point Mapping Settings
Step Position Mapping Settings
DNP3 Server
About the DNP3 Server
Analog Inputs
Digital Inputs
Analog Outputs
Digital Outputs
Accumulators
Modbus Server
About the Modbus Server
Coils
Read Only Registers
Read Write Registers
Input Status
Server Maps
SCADA master stations monitor many remote terminal units and gateway devices for certain critical information.
The MCP forms an integral part of a SCADA system by collecting data from devices and then transmitting selected
information to the master station as required. The MCP stores all the desired information for a master station in
a “map” that lists and describes the selected data points from selected devices
The server map file is based on a specific protocol and specifies what information to present to a master. The
map file contains information on how and when data is transmitted to a master station.
Once you create a server map file, it becomes available to select on the Configuration page when assigning
master connections.
Communication Statistics
Server applications maintain communication statistics and other status information in the real-time database
as pseudo points.
DNP3 Server
Note 1:
Off Point is the digital input point representing the least significant bit of a DNP3 Double-Bit Binary Input object.
On Point is the digital input point representing the most significant bit of a DNP3 Double-Bit Binary Input object.
When the Off and On points change within “Suppress Time” – a single Double-Bit event is generated, with the
timestamp of the earliest point.
When one of the Off / On points changes and the “Suppress Time” expires before the paired point changes – a
Double-Bit event will be generated with the timestamp of the point that changed. If subsequently the paired point
will also change, a second Double-Bit event will be generated with the timestamp of the paired point.
Note 2:
To assist in the workflow of point selection – when an Off Point is selected from a device in the point picker tree
list, then the next point from that device will be automatically selected as On Point. If the database has the lower
number as On point use the Invert setting after mapping. This allows also for bulk mapping of all points using the
parent checkbox in the Point Picker Tree. Clicking on the parent checkbox when is partially selected (gray) will
remove all mappings under that level.
After the initial automated selection the On Point can be changed with any other point from the available devices
in the point picker tree list for double points.
If the point selected for the Off point is the last point in the device then the On point will be same as the Off point,
this will require manual re-mapping of the On point.
If the application requires to report a single digital input point as DNP3 Double-Bit, then map the same single
digital input point as both Off Point and On Point.
Accumulator Properties
Table 6-214: Accumulator Properties
MODBUS Server
Note:
To assist in the workflow of point selection – when an Off Point is selected from a device in the point picker tree
list, then the next point from that device will be automatically selected as On Point. This allows also for bulk
mapping of all points using the parent checkbox in the Point Picker Tree. Clicking on the parent checkbox when
is partially selected (gray) will remove all mappings under that level.
After the initial automated selection the On Point can be changed with any other point from the available devices
in the point picker tree list for double points.
If the point selected for the Off point is the last point in the device then the On point will be same as the Off point,
this will require manual re-mapping of the On point.
If the application requires to report a single digital input point as DNP3 Double-Bit, then map the same single
digital input point as both Off Point and On Point.
Per-Point Settings
Address The address of the entry. (Current Starting Auto incremented
Address) from last assigned
to
(Next configured
starting address)
Per-Point Settings
Per-Point Settings
Address The address of the entry. (Current Starting Auto
Address) incremented
to from last
(Next configured assigned
starting address)
Line ID Shows the Line ID of the selected point. Not editable System Assigned
Read only. Identifier
Advanced
Application Defines when the slave should request 0 - Never 7 - Event, IIN or
Confirmation remote-station confirmation of an application 1 - Multi-fragment only Multi-
Bitmask message. 2 - Event only fragment
3 - Event or Multi-
fragment
4 - IIN only
5 - IIN or Multi-fragment
6 - Event or IIN
7 - Event, IIN or Multi-
fragment
8 - Always
Internal Indication Define whether local-station indications None Buffer
Confirm require confirmation on change in status. Buffer Overflow Overflow
Reboot On Cold Reboot the MCP when a cold restart is received True False
Start from the master: False
• True = Enable cold restart
• False = Disable cold restart
Response Maximum size of a solicited application 249 to 2,048 bytes 2,048 bytes
Fragment Size message fragment.
Report Comm Report MCP data points as Offline if MCP True True
Failure As Offline COMM FAILED quality attribute is set. False
• True = Report communications failure
• False = Do not report communications
failure
Unsolicited Data Define what type of unsolicited message is Indications Only Events and
reported to the remote station. Events and Indications Indications
Unsolicited Define the unsolicited startup message. Indications Only Events and
Startup Events and Indications Indications
Buffer Overflow Policy on how to handle buffer overflow. Discard Newest Discard
Policy Discard Oldest Newest
To add an LRU to communicate over a serial link with a DNP3 Master Station, click the Add button under
Configuration Parameters and configure the row.
In the example below, a DNP3 Master Station is configured on serial port 1 of the MCP. Under Configuration
Parameters, four rows are added and configured as follows:
Name MCP Address Map File Application Parameters Auto Start
LRU A 1 LRUA.xml Use Default
LRU B 2 LRUB.xml Use Default
LRU C 3 LRUC.xml Use Default
LRU D 4 LRUD.xml Use Default
In this example, the DNP3 master station can connect to each of the four LRUs through the serial connection
(COM1). Each LRU has a unique DNP address so that they can be communicated with independently. Each LRU
can reference the same or different server map file. If the same server map file is referenced by multiple LRUs,
each of these LRUs will serve the same data to the remote DNP3 master station.
Accept Any If set to True, the DNP3 sever responds to any True False
Master master that connects it. The Master address in this
False
case is used only for sending a destination address
in the initial unsolicited messages.
If set to false, the DNP3 server only responds to the
configured DNP3 Master.
The advanced settings listed in the table below are for adjustment by experienced system engineering personnel
and project engineers deploying the product in a specified configuration. Typically, these settings should not
require modification.
One-Line Viewer
The One-Line (also referred to as the Single Line Diagram - SLD) Viewer displays:
• The main drawing (main.dra) by default.
• Simplified schematic diagrams during runtime that represent the interconnections in a substation,
including devices and the real-time values and/or state of selected ports and points.
These custom-built diagrams are built using the following two types of objects from the MCP HMI library:
• Static objects that do not change during runtime. Examples of static objects are buttons, labels, lines
and other shapes used to lay out the drawing.
• Dynamic objects that represent a data source and are updated continually as new information becomes
available. Examples of dynamic objects are circuit breakers, switches, and value boxes. The source of
the data can be the Real-Time Database, the Active Alarms (Digital Event Manager) application or other
MCP resources.
The One-Line Viewer diagrams are designed and configured using the One-Line Designer.
The following related action can be performed: Issue a command
Previous Screen View the previous diagram (if navigation history is available) CTRL + B
Next Screen View the next diagram (if navigation history is available) CTRL + F
Animation (Play) Refresh the currently displayed diagram and start (or restart) none
the continuous update of dynamic objects
Animation (Stop) Stop redrawing the diagram and stop the continuous none
updating of dynamic objects
Display Tooltips Toggles the visibility of tooltips when mouse hovers above none
objects in this drawing. Default value is Visible.
Can be set independently for each diagram.
This is a runtime setting which overrides the pre-configured
value, and is then persisted per drawing / per user / per HMI
instance.
Reset Persistency will default to the configured value.
Drawing tasks
» To display the current data quality status:
• Point to a dynamic object.
» To open the linked diagram (replaces page currently displayed):
• Click the diagram buttons.
» To open the Command Interface window for the object:
• Double-click a dynamic object with control/set-point functionality (for example, Circuit Breaker,
Transformer, Button, Value Box).
» To access other functions:
• Right-click a dynamic object, if available, for the selected object:
• Execute Control,
• Execute Set Point,
• Tag/Inhibit,
• Local Force,
• Acknowledge Alarm,
• Acknowledge Alarm Group, or
• Navigate to Active Alarm Page (according to alarm group or point group).
Standard Toolbar
The One-Line Designer is a tool that enables you to create specialized diagrams and forms, customized to your
substation environment and viewable via the One-Line Viewer.
In addition to creating a diagram or schematic of your network, you can display real time readouts of the values
of selected ports and points.
The standard toolbar provides tools to save and open diagrams, modify the placement of objects, and change
the way the Drawing Area appears.
If you forget the function of a toolbar button, hover the mouse pointer over the button and a short description of
the button’s function is provided in the upper right of the display. A shortcut key combination is also shown that
you can use to invoke the command.
Table 6-251: Standard Toolbar
Toolbar Keyboard
Command Description
Button Shortcut
New Ctrl + N Create a new OneLine Designer drawing.
Open Ctrl + O Open an existing OneLine Designer drawing. Retrieve and edit any
drawing that has been previously saved.
When the Open a Diagram window appears, select the desired file
name from the list and click the Open button.
Save Ctrl + S As with any application, it is imperative that you save your data in
a regular and ongoing fashion. Click the Save Toolbar button.
When the Save a Diagram window appears, enter a file name or
select a file name, and then click the Save button.
NOTE: If you want the drawing to be the default diagram (the one
that is loaded when you use the One Line Viewer), then the
filename must be main.dra. You can also set the default
diagram on the Systemwide > Runtime GUI > Global
configuration tab on the Configuration window.
Refresh Symbols Refresh a symbol imported into a drawing.
NOTE: Refreshing taking effect only when the selected symbol file
has same filename as the symbol imported into the drawing.
Open Symbol Open an existing symbol (drawing) file to edit.
A symbol is useful when you have designed a drawing with a group
of objects and want to reuse this drawing as a common symbol in
multiple drawings.
Save Symbol Save opened drawing as a symbol or save opened symbol file.
The saved symbol file can then be imported into drawings or other
symbol files.
Toolbar Keyboard
Command Description
Button Shortcut
Cut Ctrl + X Cut the currently selected object(s) from the screen to the
clipboard.
Copy Ctrl + C Copy the currently selected object(s) to the clipboard.
Paste Ctrl + V Paste objects from the clipboard to the screen.
When paste to the same screen as the one copied from it includes
Data Source.
When paste to a different screen does not include Data Source.
Paste with DS Paste objects from the clipboard to the screen including the Data
Source(s) of the copied object(s).
Applies when paste onto a different screen than the one of the
copied object.
Undo Ctrl + U Undo recently made changes to the workspace.
Toolbar Keyboard
Command Description
Button Shortcut
Indicates that Snap To Grid is disabled. When disabled, a dragged
and dropped object size does not snap to the grid, the grid.
Click to enable Snap to Grid.
The grid size is selected, in the number pixels.
Stencil Panel
The Stencil Panel on the One-Line Designer page allows you to create drawing objects from a list of pre-defined
object types.
To add an object to a drawing, click on an object from the Stencil Panel. Then, click and hold your left mouse
button down on the Designer Canvas as you drag the cursor diagonally across the screen. When you release the
mouse button, an object is drawn to fill the selected area.
Objects can be re-sized and customized according to their corresponding Property Panel attributes.
You cannot add new dynamic objects or change the runtime shapes of existing dynamic objects.
Drawing Objects
A general listing of the object types available is shown below. The shortcuts are activated once the Designer
Canvas window has the focus.
Table 6-252: Drawing Objects
Name /
Icon Detailed Shortcut Description
Settings
Pointer Alt + P Click the Pointer tool, then click the cursor on an object to make it the
active object.
Confirm that the object is selected by observing a series of eight (8)
boxes surrounding the object, located one to each corner and one to
the middle of each edge.
NOTE: Even in the case of rounded objects, such as circles, the highlight
boxes are in a square configuration. Since a line is one-dimensional,
there is space only for two highlight boxes, one on each end of the
chosen line.
Label / Alt + B The Label tool allows you to create a box designed specifically to insert
settings text.
Button / Alt + Z The Button tool allows you to create a button that performs an action
settings when clicked.
Alarm Box / Alt + Y Use this tool to create a box that changes color depending on the
settings alarm status of a polled data source.
Line / settings Alt + L Use this tool to create a one-dimensional line.
Rectangle / Alt + R Use this tool to create a four-sided box of any size. You can modify the
settings color of the border and the fill, the border type and thickness, and the
URL Anchor for linking to another drawing.
Polygon / Alt + P Use this tool to create a circle or a three-sided to ten-sided polygon of
settings any size. You can modify the color of the border and the fill, the border
type and thickness,
Name /
Icon Detailed Shortcut Description
Settings
Circle / Alt + C Use this tool to create a round object of any dimension. You can modify
settings the color of the border and the fill, the border type and thickness, and
the URL Anchor for linking to another drawing.
Image / Alt + I This tool allows you to place an image on the drawing area, such as a
settings scanned image of a piece of equipment or another specialized element
not provided for in the default object types.
Value Box / Alt + V A Value Box can contain any IED value that is being polled by the MCP.
settings
Circuit Alt + X The CBBox object is designed to schematically represent a power
Breaker Box / system circuit breaker. The CBBox object accepts status inputs from 2
settings digital points (BitStrings).
Transformer / Alt + T This object is a basic graphic representation of a transformer and has
settings the same Property Value characteristics as a standard rectangle
(except for the fill choice), including border color and type, and rotation.
The URL Anchor is also available for linking to another drawing.
Ground / Alt + G This object is a basic graphic representation of a ground and is limited
settings to the same Property Value characteristics as a standard line, including
border color and type. The URL Anchor is also available for linking to
another drawing.
Switch / Alt + S This object represents a switch in the substation configuration. As
settings such, it has Property Values that can be drawn from existing
equipment. You must assign the appropriate IEDname and the
PointName for the switch. You also need to identify the correct
Property Value for when the switch is closed (0 or 1) and apply the
opposite value for the open position; note that the graphic
configuration changes its appearance relative to the switch’s
condition.
Capacitor / Alt + A This object is a basic graphic representation of a capacitor and has the
settings same Property Value characteristics as a standard rectangle (except
for the fill choice), including border color and type, and rotation. The
URL Anchor is also available for linking to another drawing.
Reactor / Alt + E This object is a basic graphic representation of a reactor and has the
settings same Property Value characteristics as a standard rectangle (except
for the fill choice), including border color and type, and rotation. The
URL Anchor is also available for linking to another drawing.
Range-Aware Alt + N Use this tool to create a line that changes color depending on the value
Line / settings of a polled data source.
Range-Aware Alt + O Use this tool to create a value box that contains the value of that polled
Value Box / data source that changes color depending on the value.
settings
Range-Aware Alt + H Use this tool to create a bar chart that contains the value of a polled
Chart / data source that changes color depending on the value.
settings
Name /
Icon Detailed Shortcut Description
Settings
Data-Source Alt + 0 Click this button to run the Data-Source Wizard. This wizard helps
Wizard manage the data sources objects.
If Create a new DataSource option is selected, the supported
DataSource Types appear. Select the required DataSource Type and
click Next. The wizard displays respective configuration window to
create the DataSource object.
If Modify existing DataSource option is selected, the supported
DataSource Types appear. Upon Selecting the required DataSource
Type, the existing DataSource objects under the selected DataSource
Type appear. Select the required DataSource object to reconfigure its
settings.
If Delete existing DataSource option is selected, the supported
DataSource Types appear. Upon selecting the required DataSource
Type, the existing DataSource objects under the selected DataSource
Type appear. Select the required DataSource object and click Finish to
delete the selected DataSource object.
NOTE: if a DataSource is referenced by one or more element(s), and
DataSource is removed, the reference to DataSource from element(s)
is automatically removed.
Import Alt + 1 Add the selected symbol file into the drawing or symbol currently being
Symbol edited.
Designer Canvas
The Designer Canvas on the One Line Designer page is the workspace in which you can create and edit one-
line drawings.
To build a drawing, click on an object from the Stencil Panel. Then, click and hold your left mouse button down
as you drag the cursor diagonally across the Designer Canvas window. When you release the mouse button, an
object is drawn to fill the selected area.
Drawing Tasks
Table 6-253: Drawing Tasks
To... Do this...
Select item(s) Click on the item with your left mouse button or click and hold your left
mouse button down on an empty area of the screen and drag the cursor
to encompass the items you want to select.
Select additional items Click and drag across multiple objects.
OR
1. Click on an object.
2. Right-click on additional objects.
Move an object Select it and drag it to the desired location. A dotted outline of the object
is shown as you move it to assist you in positioning.
To delete an object from the Select it and click your Delete key
canvas
To cut an object Select it and press CTRL + X or Select it and press the Cut button.
To copy an object Select it and press CTRL + C or Select it and press the Copy button.
To paste an object Select it and press CTRL + V or Select it and press the Paste button.
To... Do this...
To undo an action Press CTRL + U or Click the Undo button.
To redo an action Press CTRL + D or Click the Redo button.
Property Panel
The Property Panel on the One Line Designer page displays all parameters associated with the object currently
selected on the Designer Canvas. When multiple elements are selected, all common parameters are shown so
that you can edit them at one time. By modifying the values shown in this window you can alter the behavior
and appearance of the objects in your diagram.
» To modify object properties:
1. Select an object on the Designer Canvas.
2. On the Property Panel, double-click the Value field of the Property Name you want to modify.
3. Enter the new value, or if you see a drop-down list, select a pre-defined option.
4. Click anywhere outside of the field to activate your changes.
Canvas
The Canvas has settings associated with the drawing.
Click anywhere in the Canvas area to display the Canvas properties dialog and edit the settings.
In the design mode, you can set the properties of Digital Input Value1 True State and Digital Input Value2 True
State to 0 or 1 and verify that the fill color settings are satisfactory.
Table 6-260: Circuit Breaker Box Object Settings
Setting Description Range Default
Name Name of the One Line Designer Text Circuitbreakerbox
object.
X X (horizontal) pixel position from 0 to the Draw Panel width 0
the top left corner of the screen to less the object width
the top left corner of the area used
to display the object
Y Y (vertical) pixel position from the 0 to the Draw Panel height 0
top left corner of the screen to the less the object height
top left corner of the area used to
display the object
Border Type Defines the type of border to One of No border, No border
display Symmetric borders, raised
borders, Sunken borders,
Outdent borders, Indent
borders, Picture borders,
double raised, Double
sunken, Bottom right
borders, Top left borders
Border Color Defines the color to apply to the Any 24-bit RGB Color Gray
border around the perimeter of
the display area of the object
Border Variant Defines the width of the border to 0 to 9 0
display
Border Multiplier Defines the thickness of the border One of None (x1), x2, x3, x4, None (x1)
to display x5, x6, x7, x8
Width Pixel width of the rectangular area 1 to the Draw Panel width 12
used to display the object
Height Pixel height of the rectangular 1 to the Draw Panel height 12
area used to display the object
Digital Input Digital input 1 value to associate 0 or 1 1
Value 1 True with a “true” state
State
Digital Input Digital input 2 value to associate 0 or 1 1
Value 2 True with a “true” state
State
FF_Color The background color to display Any 24-bit RGB Color Gray
when the digital input 1 value (high
or leftmost bit) corresponds to the
false state, and the digital input 2
value (low or rightmost bit)
corresponds to the false state.
FT_Color The background color to display Any 24-bit RGB Color Gray
when the digital input 1 value (high
or leftmost bit) corresponds to the
false state, and the digital input 2
value (low or rightmost bit)
corresponds to the true state.
Invalid
Online Reports
Online Reports are the Periodic Data-logger reports configured in the Data Logger application.
Field Description
Periodic Datalogger Choose the available Datalogger Reports.
Reports
Templates Choose the available Online Template. Only one Default Online Template can exist in
the MCP.
Start Date Set the start date that data is to start populating the generated Reports.
Use the checkbox to enable and disable the start date:
• Select the checkbox to enable a start date.
• Clear the checkbox to disable a start date.
When the Start Date field is enabled, you can either:
1. Click the Start Date field.
Result: The Select Date/Time window appears.
2. Select the date and time.
3. Click Select.
or
• Use the up-arrow and down-arrow buttons to change the Date/Time.
Field Description
End Date Set the end date that data is to stop populating the generated Reports.
Use the checkbox to enable and disable the end date:
• Select the checkbox to enable an end date.
• Clear the checkbox to disable an end date.
When the End Date field is enabled, you can either:
1. Click the End Date field.
Result: The Select Date/Time window appears.
2. Select the date and time
3. Click Select.
or
• Use the up-arrow and down-arrow buttons to change the Date/Time.
Column Description
Selection Check this box to select the Analog Input Point to generate the Online Report.
Source The Home Directory and Point ID of Analog Input Point.
Bay ID The Bay ID of the Analog Input point
Point Description The Point Description of the Analog Input Point.
Point Reference The Point Reference of the Analog Input Point.
Control Description
File Type Select the file format of the periodic data logger reports to be viewed:
• html
• pdf
• xls
Show button Click to view a Datalogger report.
Offline Reports
Offline reports are generated by the Analog Report Generation application.
This feature allows you to view and download the Analog Reports generated over a period in any of the following
file formats:
• html
• pdf
• xls
All available reports are listed in the file tree structure in the left pane.
Report names with:
• Suffix In Progress: indicates that the report is still in the process of being logged.
• Prefix Archived <N>: indicates that the report is archived on the MCP to avoid logging records
having the same record time on the same offline report file before and after the system date/time
changed. <N> is sequence number.
Records having the same record time might be found in archived offline report and regular offline report.
Field Description
Disk Usage Indicates disk usage in percent against total disk size configured.
Estimated Days of Disk Estimated number of days that the disk will be full. This approximation is based on
Full the various parameters such as the Number of configured Reports, Size of each
Report and the Available Disk Space.
Total Reports Indicates the total number of reports currently available on disk.
Total Shift Reports Indicates the total number of shift type reports currently available on disk.
Total Daily Reports Indicates the total number of daily type reports currently available on disk
Total Weekly Reports Indicates the total number of weekly type reports currently available on disk
Total Monthly Reports Indicates the total number of monthly type reports currently available on disk
Control Description
checkbox Use the checkbox to select and de-select the Reports
• Checkbox to Select a Report
• Clear the checkbox to de-select a Report
File Type Select the file format of the periodic data logger reports to be viewed:
• html
• pdf
• xls
To save one or more reports:
Save
1. Select the report(s) in the file tree structure in the left pane. Use the checkbox to select
button
and de-select reports.
2. Click Save.
Delete To delete one or more reports:
button 1. Select the report(s) in the file tree structure in the left pane. Use the checkbox to select
and de-select reports.
2. Click Delete.
Filter Click the Filter down-arrow to view the filter options.
button Result: The Select Filter window appears.
You can either:
• Type in a specific Report Name, or
• Choose a set of Analog Reports that were generated between the Start and End Dates.
Click the Apply button to list the reports that match the specified filter conditions.
Click the Show All button to list all available reports.
Click X (top-right) to close the Select Filter window.
Reports Tab
The Reports tab of the Analog Reports Generation configuration window allows you to configure different sets of
reports in the system.
Field Description
Report ID Auto-generated unique report identifier number.
Report Name Type the report name.
Template Name Select the template:
Battery Chargers
Circuit Breaker
Transformer Reactor Temperature
Meter Readings
EHV Line
EHV_Transformers
Daily Voltage Summary
Polled Data
NOTE: The MCP Analog Report Generation Application also allows you to add
additional (user-configurable) templates. Refer to the Jasper iReport Configuration
Manual.
Report Type Select the type of report:
Shift
Daily
Weekly
Monthly
Enable Logging Check this box to enable logging of the configured analog data.
Report Duration Select the duration period in which data is to be logged before a report is generated:
4 hours
6 hours
8 hours
12 hours
Log Interval Select the interval at which a new record is to be logged for the report:
15 Minutes
30 Minutes
60 Minutes
Start Time Alignment Select the hour of the day (on a 24-hour clock) at which a new report will start to log
(Hour of Day) data. The range is 0 to 23 hours.
Logging Alignment Select the minute of the hour at which every record will be aligned in a report:
(Minute of Hour)
xx:00
xx:15
xx:30
xx:45
Home Dir Home Directory of the source Analog Point … which point has been mapped to this report
Mapped for logging parameter.
Point ID Point ID of the source Analog Point Mapped for
logging
Point Point Description of the source Analog Point
Description Mapped for logging
Point Point Reference of the source Analog Point
Reference Mapped for logging
Value Type the suitable text for each row. … the Template selected in the
The entered text appears as the header and footer Properties fields. This field can be edited
of the generated reports. The position of the header
and footer in the layout of the generated report can
be pre-defined in the Template
Templates Tab
The Templates tab allows you to:
• Upload a user-configured Template to the MCP
• Download available Templates from the MCP
• Preview the available user-configured Templates.
Field Description
Template Name Type the template name.
Jasper File Displays the name of the Jasper file.
XML File Displays the name of the .Jrxml file.
Details
Creation Time The time that this template was created.
Installation Time The time that this template was uploaded to this MCP.
Template Description The description of the template file provided by the Template.
Button Description
Upload Upload a report template to the MCP. For example, the uploaded report template
could have been created using Jasper iReports Software.
Download Download a report template from the MCP.
Preview Preview a report template.
Field Description
Storage Full Select an action to occur when the configured Analog Report Generation storage space
Action is full.
The options are:
• Delete Oldest Reports
• Stop New Reports
Threshold (%) for Set the percentage of storage space at which a warning message appears.
Storage Full The valid range is 50% to 95%.
Time Zone Select a time zone from the list provided.
This parameter affects the Start Time Alignment and Logging Alignment of the report.
Security Features
The MCP employs several security measures to ensure the safety of the MCP system from unauthorized users,
including:
• Log in using password security and authentication
• Secure HMI access using security certificates
• User access levels to limit access to MCP functions
• User authentication before executing control commands
• Secure shell (SSH) log in for terminal session (optional)
• Automatic logout
• TLS based encryption and identity verification on serial and Ethernet connections
• Password Complexity
For information on setting up secure Web access and remote authentication, see the G500 Substation Gateway
Instruction Manual (994-0152) or G100 Substation Gateway Instruction Manual (994-0155).
System Security
The MCP provides security features to authenticate its identity and to maintain the privacy of information
between the MCP and your computer when communicating over the Internet. The MCP makes use of digital
signatures and secure Web access to ensure this security.
Secure Web access to the MCP is provided using the Transport Layer Security (TLS) protocol version 1.2 over a
128-bit connection. To support the MCP's secure Web access features, you need to obtain and install a security
certificate and a private key on the MCP.
Refer to the G500 Substation Gateway Instruction Manual 994-0152 or G100 Substation Gateway Instruction
Manual (994-0155) for details.
Password Complexity
To ensure the strength of user passwords, it is recommended that a specific set of rules be presented to users.
Passwords must contain characters from all the following categories:
• English uppercase characters (A through Z)
• English lowercase characters (a through z)
• Base 10 digits (0 through 9)
• Non-alphabetic characters (for example, $, #, %)
• A maximum of 199 characters for a password are allowed.
Connection Security
The MCP supports the below security features for the pass-through supported and terminal server applications.
This can be configured using the Connection tab > Secure Type option. The Secure type options are:
• Disabled (default)
• Telnet : The MCP supports pass-through and terminal server access to the devices
from PC-based configuration tools and, if necessary, COM port redirection
software. These connections are accessible through a TCP port on the
MCP.
• TLS Security : The MCP supports Transport Layer Security (TLS) which is cryptographic
protocol that provide security for communications over networks such as
the Internet. TLS encrypt the segments of network connections at the
Application Layer to ensure secure end-to-end transit at the Transport
Layer.
• SSH Secure Tunnel : The MCP supports SSH Secure Tunnel to provide secure access to pass
through and terminal server connections.
The Telnet, TLS Security, SSH Secure Tunnel features are available on the following types of connections:
• IEC 60870-5-103 Multi-drop
• Modbus Multi-drop
• Generic ASCII
• SEL Binary with MCP as Master
• Terminal Server
User settings
Table 6-296: User Management Tab Settings
Name Description
Username Enter a username to identify the user to the MCP. This is the username when logging into
the system. Usernames may only contain numbers, lower-case letters, and the dash (-)
and underscore (_) characters.
Privilege Level Select an access level assigned to the user: Observer, Operator, Supervisor or
SSHPassThrough.
Full Name Enter the full name of the user.
Password Enter a password for the user. The password displays as asterisks (*).
Confirm Password Enter the same password as above.
User Home Page Select the UI page from the dropdown list. For details see section: Configure User Home
Page on page 236.
Local Authentication
Local authentication makes use of files stored locally to control user authentication, as opposed to connecting
to a remote server to obtain username and password information. This is the default authentication mode
available in the MCP.
The MCP has two types of administrative users.
Default - Default username is defadmin and the default password is defadmin. When user
Administrator logins using defadmin, only minimal configuration (adding new administrator user,
configuring LAN and rebooting the unit) will only be available. Using this Default
Administrator User would need to configure a nominated/custom administrator-level
user(s) to login and configure MCP.
Remote Authentication
The MCP supports two remote authentication modes:
• Cisco® TACACS+
• LDAP
To enable Local, Cisco® TACACS+, LDAP authentication modes, you must login to the MCP HMI as an Administrator
User and then click on Settings > Access > Authentication tab.
NOTE: If working in redundancy, above configuration need to be done in both Active and Standby
devices.
At least one emergency admin user needs to be configured in Emergency users.
Remote authentication server should be up and running.
Configure IP Address of PEER Gateway: Use this function to set the unique IP Address of the other MCP device
configured within the redundant system. If the PEER MCP has a second Ethernet interface, you can configure it
as well. The adapter IP Addresses of the PEER MCP must be entered here (see the Ethernet Connections topic in
the MCP online help.
NOTE: In redundancy, both MCPs must be configured with the same authentication mode (i.e., either
Local or Remote). Setup Public Key authentication with PEER Gateway.
How Cisco TACACS+ privilege levels are configured has changed slightly to accommodate the
“SSHPassThrough” group. Refer to Cisco TACACS+ for information on configuring your TACACS+ server.
The following table provides an example of configuring Cisco TACACS+ including new user privilege level
“SSHPassThrough”:
The Lightweight Directory Access Protocol (LDAP) remote authentication mode requires the following
settings:
• Full Qualified Domain Name FQDN of LDAP server.
Also, when authentication is switched from Local to Remote or Remote to Local, user must navigate to
Redundancy Manager Point details page in Active MCP and apply DO command on "Sync Config" DO pseudo
point so synchronize the authentication settings to the Standby MCP .
Secure Access
The default secure services that MCP employs are HTTPS, SFTP, and SSH.
SECURITY NOTICE The SFTP, and SSH services are automatically configured by default.
The HTTPS service is enabled by default. It is the user’s responsibility to install a
server certificate.
Read License
This option displays the license information of the live target unit (connected MCP device).
Displayed information may be copied to the Windows Clipboard with regular actions (mouse click and drag or
CTRL+A to select, right click or CTRL+C to copy).
Extract License
This option allows user to extract the current license file from the live target unit to a specified PC location, for
example to archive a copy.
The extracted license file is saved as a *.key file (default name is license but can be changed as desired).
Apply License
This option allows user to apply a compatible license key, from a location in the PC, to the live target unit.
NOTE: The live target unit is restarted at the end of this process, not immediately, and only if a hardware
compatible license file was selected.
When browsing for license files, user must select the folder containing one or more license files. The action does
not include sub-folders of the selection.
In the resulting dialog only license files (any filename) that match the Hardware Identifier of the live target unit
are displayed for selection. This is the reason why users must first login to the live device as Administrators.
If the selected folder has no license compatible with the connected live unit, an information dialog is presented
to this effect:
If a valid license file has been selected it will be applied and the device restarts:
The workflow to apply a license can be cancelled at any time before selecting a valid license and click on OK.
Firewall Settings
The MCP contains a firewall capable of stateful packet inspection to protect your device from unauthorized
access. By default, network interfaces on the MCP drops packets that are determined to be invalidly routed or
unsolicited.
The MCP firewall is intended only to protect itself and does not extend protection
SECURITY NOTICE to other devices on the network. As such, it does not replace the need for a
network firewall which offers deep packet inspection and detailed configuration
capabilities.
The MCP firewall is automatically configured by default to its most secure setting.
The user assumes all responsibility for associated security risks if the firewall
configuration is manually changed.
It is the user’s responsibility to connect Internal zone interfaces to networks that
are protected from unauthorized use.
The MCP firewall is intended only to protect itself and does not extend protection to other devices on the network.
As such, it does not replace the need for a network firewall which offers deep packet inspection and detailed
configuration capabilities.
Network interfaces can operate in one of two modes:
Internal - The Internal mode permits traffic from known protocols and should only be enabled on
interfaces connected to known devices only. The Internal mode is the default mode for Net0,
Net1 and would typically be used when the interface is connected to the substation LAN.
External - The External mode offers a stricter set of rules and is the default mode for all interfaces except
Net0 and Net1. The External mode would typically be used when the interface is connected to
a WAN.
Default modes can be changed by user.
To configure Firewall via mcpcfg, refer Configure Firewall or via Settings GUI, refer Configure Firewall.
Automatic logout
For security, the MCP includes a configurable automatic logout feature. You are automatically logged out of the
MCP system when the Inactivity timeout period is reached.
Thirty seconds before the configured inactivity timeout period is to expire, a warning message appears asking
you whether you wish to continue. Click Renew Session to continue using the HMI.
When an automatic logout occurs, a message appears indicating that you have been disconnected from the
MCP and you are prompted to close your Web browser.
System Utilities
This chapter contains the following sections and sub-sections:
Utilities
Utilities Log In
Certificate Import
Diffie Hellman parameter files
Private key file
Certificate Management
Local tab
Issuer tab
CRL tab
Certificate Error Codes
Export Database
Export Database
Export Database .CSV Files
Exporting VPN Client Configuration
Utilities
The Utilities page provides access to software tools installed on your MCP device. All available utilities are listed
along with a description of the functionality they provide.
NOTE: Except Login to the MCP utility other configuration options are only supported through Local HMI of MCP
and not available either in MCP Remote HMI or MCP Offline Configuration Tool.
The following related actions can be performed:
Login to the MCP utility This Utility is used for an SSH (Secure Shell) terminal session to the MCP.
functions To login you must have Administrator access and your username and password.
Import Certificates Import certificates and Certificate Revocation Lists (CRLs) from an externally mounted
filesystem or the local import directories.
Manage Certificates Manage Local Certificates, Issuer Certificates, and Certificate Revocation Lists.
Export Database utility Export/Backup Local Database.
Generate Gateway Key Generate Public/Private key pairs in the MCP for the SSH terminal session.
Pair This MCP HMI utility provides an option to:
• Save the generated Public key to the host computer
• Delete the existing keys.
Exporting VPN Client Export the VPN Client Configuration File into a PC/Shared Location/USB. The VPN Client
Configuration File File is used to configure the VPN Client to establish VPN connection with the VPN server
running in the MCP. You must install a Server Certificate prior to exporting the VPN
Client File. Go to the Configuration powerbar button > Communications tab, and then
select Network Connection and Network Connection Type: VPN Server.
Utilities Log In
For security reasons, some advanced MCP configuration and system administration functions are available
only at the MCP command line interface. The Utilities page provides a Secure Shell (SSH) login to establish a
remote terminal session with the MCP. You must have Supervisor-level access to proceed with Utilities Log In.
Access to the command line interface requires an additional Administrator log in.
If the Utilities page displays an SSH button, the security portal has been configured for a Secure Shell (SSH) login.
» To log in:
1. Click SSH.
2. Enter your Administrator username.
3. Click OK to verify the MCP unit name.
4. Acknowledge the security message.
5. Enter your administrator password.
Result: The command line interface appears.
Certificate Import
The Certificate Import window allows you to copy local certificates, issuer certificates, and certificate revocation
lists (CRLs) from a connected USB drive or from the user CompactFlash card. These certificates and revocation
lists are used to facilitate secure connections to remote devices.
Your local certificate may or may not contain Diffie Hellman parameters, the private key, and/or the issuer chain.
In the event these are not included within your local certificate, you can install them using the procedures
specified below.
» To import certificates:
1. Plug a USB drive containing the certificates, CRLs, Diffie Hellman parameter files, or private key files in
a root folder called SecureScadaTransfer into one of the USB ports
or
Copy the files to the /mnt/usr/SecureScadaTransfer/ folder using a utility such as Secure File Browser
from DS Agile MCP Studio. Note that the local USB method is more secure than transferring the files
over an unprotected Ethernet connection.
2. On the Utilities page, click the Import button that is shown under the Certificate Import heading.
3. The Certificate Import window opens and displays the progress of the task. Once the files have been
imported, a message is shown indicating the number of items that were successfully copied over.
4. Close the Certificate Import window.
5. Disconnect the USB drive
or
Close the SCP connection to the MCP.
Once the certificate files have been imported to the MCP, they must be installed using the Certificate
Management window on the Utilities page. You must install these files within 96 hours of importing them or
else they are automatically deleted. For more details refer to Appendix G – Security Certificates Creation for MCP.
Certificate Management
The Certificate Management window allows you to install the local certificates, issuer certificates, and certificate
revocation lists (CRLs) that have been copied to the MCP using the Certificate Import utility. Diffie Hellman
parameter files and private key files are automatically installed when they are imported using this tool. For more
details refer to Appendix G – Security Certificates Creation for MCP.
To enable connection security, you must have:
• A local certificate installed
• An issuer certificate available for all certificate authorities used by remote devices
Certificates belonging to remote devices are transferred automatically when the secure connection is
established, so they do not need to be managed using this utility.
Local tab
The Local tab contains the certificate that is provided to remote devices to allow them to verify the identity of
the MCP unit. The Staged Local Certificates area shows all the local certificates that have been copied to the MCP.
Select one and click the Install button to install it as the local certificate. Though there is no limit on the number
of local certificates that can be staged, only one can be installed on the MCP device at any time.
Issuer tab
The Issuer tab contains the certification authority certificates that are used by the MCP to verify the integrity of
certificates provided by remote devices. Refer to the connection security section for an explanation of how issuer
certificates are used. You must install the issuer certificate belonging to the provider of the identity certificate of
each remote device you are connecting to. However, multiple devices can refer to the same issuer certificate if
the same issuer was used.
The Staged Issuer Certificates area shows all the issuer certificates that have been copied to the MCP. Select one
and click the Install button to install it. Though there is no limit on the number of issuer certificates that can be
staged, only one certificate per issuer can be installed at any time (up to a maximum of 32 issuers).
NOTE: You must install all the certificates in the issuer chain. For example, you may be using an intermediate
signing certificate provided by a certificate authority to issue your own certificates for remote devices.
In this case, you would need to install both the intermediate signing certificate and the issuer's root
certificate.
CRL tab
The CRL tab contains certificate revocation lists provided by third party certificate issuers. These lists are used to
revoke invalid certificates that were previously issued under the authority of the issuer. By maintaining accurate
CRLs, you can ensure that revoked certificates are not accepted. The Staged CRLs area shows all the CRLs that
have been copied to the MCP. Select one and click the Install button to install it. Though there is no limit on the
number of CRLs that can be staged, only one CRL per issuer can be installed at any time.
Export Database
Export Database
The Database Export utility allows you to save sequence of events and analog data logger points from your MCP
device to your local computer in comma-separated values (CSV) format.
» To export data using the Export Database utility:
1. Click the Export Database > Export (button) on the Utilities page.
Result: The Export Database utility is launched in a new window.
2. Click the ellipsis button (...) next to the Path field and select the directory where the .csv files is to be
stored.
NOTE: In Local HMI, the logs (.csv files) must be exported to /home/hmi/logs or into the USB mounted
on the MCP.
3. Enter the Start Date using the pattern shown in the field or select Earliest Record.
4. Enter the End Date using the pattern shown in the field or select No End Date.
5. Select the data sources to be exported. If Sequence of Events is selected, all SOE data within the
configured timeframe is included. If Analog Datalogger is selected, a tree view is shown allowing you
to select the specific points, reports, or report types to be included.
6. Click the Extract button.
The status bar displays the progress of the operation. All downloaded files are stored in a sub-folder within the
configured path (the name of the subfolder is the date and time of the export). Once the export task is complete,
the status bar shows the message, <Time and date> Download Complete.
Refer to Export Database CSV Files for an explanation of the files that may have been exported.
NOTES:
• The Export Database utility does not support simultaneous export by multiple users. You should verify
that no other export operations are in progress before beginning a new one.
• If no data logger records exist within the selected timeframe, the exported file contains one entry that
shows the first available value before the selected start time. This does not apply to SOE records.
• In Local HMI, the logs (.csv files) must be exported to /home/hmi/logs or into the USB mounted on the
MCP.
» To download all records that have been created since your last export:
1. Select the path where you stored the files from the previous export. You should select the higher-level
directory and not the subfolder containing the CSV files that were downloaded.
2. Click the Load Settings button. The options that were previously selected are restored.
3. Ensure that the Continue from last download checkbox is enabled. This automatically downloads the
new records.
If the selection of data sources is changed, the Continue from last download feature is not available.
4. Click the Extract button.
This procedure can be repeated as often as desired to keep the local export files current. As before, all
downloaded files are stored in a new subfolder within the configured path (the name of the subfolder is the date
and time of the export).
Interrupted Transfers
If an export is cancelled or interrupted before all records are transferred, one of two actions may occur.
• If an SOE export was interrupted, there is no option to resume the export. You can either overwrite the
partially downloaded file with new data or you can save the new data file in a different directory.
• If a Data Logger export was interrupted, a warning message appears during the next export operation.
If you click Yes, the utility completes the download that was interrupted using the previously configured
options (any new options selected are ignored). If you click No, the utility exports the data from the
beginning based on the settings configured. You can choose to overwrite the existing partial data files
or to save them in a different directory.
Sequence of Events
SOE data is exported directly from the MCP system database to a single .csv file.
SOEvents.csv
Table 6-299: Sequence of Events
Field Description
Record ID A unique numerical identifier for the record.
Source Point ID The unique numerical identifier of the point referenced in the record.
Source Point The short user-defined name for the source point.
Reference
Source Point The user-defined block of text that provides a detailed and localized description of the
Description source point.
Point Type The type of point that the source point is, either single or double point.
Event Value The binary state of the point, either 0 or 1.
For the Double Point, the value of the state is 2 to 5, where
• State 2 = Open
• State 3 = Close
• State 4 = In transit
• State 5 = Invalid
Event Date The date and time of the record.
Originator The source of the control command. See Originators for more information. 0 indicates
"Not Supported".
Quality For most events, this field equals 32768 or 0. If this field contains 32768, the time values
in the EventSec, EventuSec, and EventTimeVal fields were populated based on the time
stamp from the device. If this field contains 0, the protocol reporting the event does not
support time stamps, so the event was time stamped by the MCP when it was received
from the device.
In some places, quality attributes (flags) are presented as a numeric value instead of a list
of discrete flags. To determine which quality flags are set, please refer to the Quality
Attributes section on page no. 133.
State Description The user-defined description for the binary state of the point.
Field Description
Home Directory The Home Directory of the device or application that generated the record.
Line ID The user-defined line ID for the device or application that generated the record.
Device ID The user-defined ID for the device or application that generated the record.
Bay ID The user-defined bay ID for the device or application that generated the record.
Device Type The user-defined map file or device type, as applicable
NOTE: In Local HMI, the logs (.csv files) must be exported to /home/hmi/logs or into the USB mounted on the
MCP.
Data Logger
Data logger records are exported across several .csv files. These relational tables can be linked together using
several fields.
Figure 6-8: Data Logger - Data Flow
The Loggers.csv file contains one row for each trend exported from the Data Logger. Each logger row can be
linked to a report using the Report ID field (linked to the ID field in Reports.csv), to a point in the points table with
the Point ID field (linked to the ID field in Points.csv), and to the dataset itself, which is stored in a file called
Records_n.csv, where n is the ID field in Loggers.csv.
Reports.csv
This csv report file contains information on all exported Data Logger reports.
Table 6-300: Data Logger - Reports
Field Description
ID A unique numerical identifier for the report.
Type The report type, either:
• ContinuousReport,
• PeriodicReport, or
• OutofRangeReport.
Name The user-defined name for the report.
Active Whether the report is enabled on the MCP device, either Active, or Deactivated.
Field Description
inTriggeredState Records if the report was in the Triggered state at the time of export, either TRUE or
FALSE.
File Size The amount of disk space, in bytes, allocated for the report within the Data Logger
Configuration Tool on the MCP device.
Usage The amount of disk space, in bytes, the report is currently consuming.
Percentage The percentage of disk space used by the report divided by the amount of disk space
allocated for it.
Points.csv
This csv report file contains a listing of all unique points referenced in the reports. Though points may be
referenced multiple times in different reports, they only appear once in this file.
Table 6-301: Data Logger - Points
Field Description
ID A unique numerical identifier for the point.
DataType The data type of the point, currently only ANALOG_IN is supported.
IED The user-defined name for the device that contains the point.
Point Ref Point Reference, the short user-defined name for the source point.
PointDescription The user-defined block of text that provides a detailed and localized description of the
source point.
numLoggers The number of loggers assigned to this point.
Loggers.csv
This csv report file contains a listing of all the trends that were exported. There is one record for each point in
each report (that is, points referenced in multiple reports are repeated in this table).
Table 6-302: Loggers
Field Description
ID A unique numerical identifier for the logger. The number shown here corresponds to
Records_n.csv, which contains the dataset for this logger.
ReportID A numerical reference to the ID field in the Reports.csv file.
PointID A numerical reference to the ID field in the Points.csv file.
OldestRecordID The ID of the oldest record contained in the corresponding Records_n.csv file.
OldestTime The timestamp of when the oldest record was created (based on the MCP device clock).
OldestMSecs The milliseconds portion of the oldestTime timestamp (based on the MCP device clock).
NewestRecordID The ID of the newest record contained in the corresponding Records_n.csv file.
NewestTime The timestamp of when the newest record was created (based on the MCP device clock).
NewestMSecs The milliseconds portion of the newestTime timestamp (based on the MCP device clock).
Records_n.csv
One .csv file is created for each logger trend above. The n in the filename corresponds to the ID field shown in
the Loggers.csv file.
Utilities button .
To export a VPN Client file:
1. Go to Export VPN Client File option and click the Export button.
3. Select the Local Gateway IP Address to which the VPN Client will need to connect from the list of
Configured IP Address of the MCP.
4. Enter the Password to save the Client Configuration file in protected &compressed format. You need to
use the same password to uncompress the Client configuration file using 7Zip or WinRAR software.
NOTE: Exporting VPN Client Configuration options is also available through File Explorer functionality in
Local HMI. The compressed Client Configuration file is available in the USB.
2. Select the p12 file by clicking the File button and then input/confirm the export password. Then click the
“Upload” button to start uploading the bundle.
3. Then a warning window will pop up. If you understand and accept, then click “Yes” button to proceed.
If the upload succeeds, the current online editor will be closed automatically. You will need to reconnect to
the MCP due to the new p12 file being applied.
Method 2: To upload SSL Server Certificate/Server Key from the Local HMI:
1. Copy the p12 file to a USB flash drive formatted with FAT32 (must have a partition table).
2. Insert the USB flash drive into a USB slot on the MCP.
3. Open the file explorer from the top Power Bar and select Mount USB.
4. Go to “Upload SSL Server Certificate/Server Key” option and click the Upload button.
5. Select the p12 file by clicking the File button and browse to the USB flash drive. Input/confirm the export
password, and then click the “Upload” button to start uploading the p12 file.
6. Then a warning window will pop up. If you understand and accept, then click “Yes” button to proceed.
There is no need to restart the local HMI because it uses an internal connection, which doesn’t require a
certificate.
Miscellaneous Utilities
This chapter contains the following sections:
Utilities Overview
Setting up a Terminal Session
Pass-Through Connections
Direct Connect (mcpconnect)
MCP Configuration Manager
Utilities Overview
Configuration information related to the MCP system is changed using utility programs that are installed on the
MCP platform.
The MCP system utilities are typically used during the initial setup of the MCP and for changing the basic
configuration of the system, including the network connections, system date and time, and administrator
passwords.
The utilities are intended for use by service personnel and application engineers responsible for setting up and
maintaining the MCP. Because of the advanced functionality, it is helpful to have basic knowledge of Telnet, ftp
and Linux commands to execute the commands for your specific system setup.
The MCP includes the following utility programs:
• MCP Configuration Manager
SSH Log In
For security reasons, some advanced MCP configuration and system administration functions are available only
at the MCP command line interface. The Utilities page provides a Secure Shell (SSH) login to establish a remote
terminal session with the MCP.
You must have Supervisor-level access to proceed with SSH Log In. Access to the command line interface
requires an additional Administrator log in.
If the Utilities Log In page shows a Utilities Login via SSH button, the security portal has been configured for a
Secure Shell (SSH) login.
» To log in:
1. Click Utilities Login > SSH button.
2. Enter your Administrator username.
3. Click OK to verify the MCP unit name.
4. Enter your Administrator password.
Result: If your login is successful, the command line interface appears.
Pass-Through Connections
For client applications that support pass-through connections, these connections are accessible through a TCP
port on the MCP. You can connect to the device through the MCP using PC-based configuration tools and, if
necessary, COM port redirection software.
» To enable client pass-through connections:
1. Click the Configuration Power bar button.
2. Click the Systemwide tab.
3. Click System in the left-hand menu and the select the Security tab.
4. For Pass-Through and Terminal Server Access, select Allow Network Connections.
Result: The port number is automatically assigned as 8000 plus the serial port number the client is using.
For example, if the client is configured to use serial port 1, the pass-through connection port is 8001.
To enable pass-through connections on a serial port without enabling a client application, the port must be
configured as an automatic terminal server.
» To enable SSH Secure Tunnel pass-through/Terminal Server connections without a client application:
1. On the Connection tab of the MCP Online Configuration Tool, configure the port as Terminal Server.
2. Set the Startup parameter to Automatic.
3. On the Systemwide tab of the MCP Online Configuration Tool, click System in the left-hand menu and
then select the Security tab.
4. Select Allow Network Connections for Pass-Through and Terminal Server Access.
5. Select SSH Security Tunnel Idle Timeout under the Security tab and change (if you want to change the
default value of 120 seconds).
6. Go to the Connection tab, click Secure Type and select the SSH secure tunnel option from the drop-
down list.
For SSH secure tunnel Pass-Through and SSH secure tunnel Terminal Server Access, select Allow Network
Connections.
The port number is automatically assigned as 8000 plus the serial port number. For example, if the terminal
server or pass through enabled client connection is assigned to serial port 2, the SSH Secure Tunnel terminal
server or client pass-through connection port is 8002.
Use SSH client software (e.g., Secure Terminal Emulator from DS Agile MCP Studio) in a PC and connect to the
pass-through server port or terminal server port.
For Security reasons, SSH Secure Tunnel Pass Through and Terminal Server Connections are available only to the
Administrator and SSHPassThrough level users only. Refer to User Management Section for details about
SSHPassThrough User Role.
For example, to trigger a network synchronization followed by a restart of the applications running on the remote
unit, you would enter the command:
./configmgr.pl –m network –i <IP Address of remote computer> -u <username of remote MCP unit> -p
yes -f yes
If the transfer of the configuration is successful, a confirmation notice appears. If any errors occur, a description
of the failure is shown.
Analog Reports
Calculator
Data Logger
Accumulators
Table 7-27: DCA Pseudo Points - Accumulators
MsgSent Accumulator for the total number of messages sent to all devices.
MsgReceived Accumulator for the total number of messages received from all devices.
MsgTimeOuts Accumulator for the total number of message timeouts detected. It is incremented
every time the device has failed to respond to a Request within the allowed
timeout.
Digital Input
Table 7-28: DCA Pseudo Points - Digital Input
Digital Output
Table 7-29: DCA Pseudo Points - Digital Output
Enable Polling Of All This control enables or disables polling status of all devices in multi drop device
IEDs configuration.
If disabled, the polling status of all the individual devices will be disabled.
If enabled, the polling status of all the individual devices will be enabled.
NOTE: If “Enable Polling of IED” DO Pseudo Point is Disabled and if “Enable Polling Of All
IEDs” control is Enabled, the polling status of device is given priority. Rest of the devices
whose “Enable Polling Of IED” DO Pseudo Point is Enabled will be Enabled.
DisableAllDevices This control enables or disables the running state of all IEDs.
When Set to Enabled, all the individual devices will be enabled unless specific device DO
Pseudo Point DisableDevice is in Disabled state.
When Reset to Disabled, all the individual devices will be disabled.
Accumulators
Table 7-30: IED Pseudo Points - Accumulators
UpdateCount Accumulator for the total number of points in the RTDB that have been updated for this
device.
MsgSent Accumulator for the total number of messages sent by the Client to the device.
MsgReceived Accumulator for the total number of messages received by the Client from the device. It
is incremented only when the message is received from the device and response is valid.
MsgTimeOuts Accumulator for the total number of message timeouts detected by the Client for the
device. It is incremented every time the device has failed to respond to a Request within
the allowed timeout.
MsgError Accumulator for the total number of frames received in error from the device.
Analog Input
Table 7-31: IED Pseudo Points - Analog Input
ConfigErrors Indicates the number of responses received in error because of misconfiguration. This is
detected based on the Invalid Pattern definition of the transaction definition in client
map file.
Digital Input
Table 7-32: IED Pseudo Points – Digital Input
Digital Output
Table 7-33: IED Pseudo Points – Digital Output
DisableDevice This control enables or disables the running state of the device.
When Set to Enabled, the device will be enabled.
When Reset to Disabled, the device will be disabled and will be declared as OFFLINE.
ClearStats This control clears all the communication statistics UpdateCount (MsgSent, MsgReceived,
MsgTimeouts and MsgErrors) Pseudo Points of the device.
Enable Polling Of IED This control disables or enables polling to the device.
If set to Disabled, the polling to the device is stopped.
If reset to Enabled, the polling to the device will be resumed.
Text Points
Table 7-34: IED Pseudo Points – Text Points
IEC 101 with MCP as Master – Device Level – Digital Input Points
Table 7-36: IEC 101 with MCP as Master – Device Level – Digital Input Points
IEC 101 with MCP as Master – Device Level – Digital Output Points
Table 7-37: IEC 101 with MCP as Master – Device Level – Digital Output Points
IEC 101 with MCP as Master – DCA Level – Digital Input Points
Table 7-39: IEC 101 with MCP as Master – DCA Level – Digital Input Points
IEC 101 with MCP as Master – DCA Level – Digital Output Points
Table 7-40: IEC 101 with MCP as Master – DCA Level – Digital Output Points
IEC 104 with MCP as Master – Device Level – Digital Input Points
Table 7-46: IEC 104 with MCP as Master – Device Level – Digital Input Points
IEC 104 with MCP as Master – Device Level – Digital Output Points
Table 7-47: IEC 104 with MCP as Master – Device Level – Digital Output Points
IEC 104 with MCP as Master – DCA Level – Digital Input Points
Table 7-49: IEC 104 with MCP as Master – DCA Level – Digital Input Points
IEC 104 with MCP as Master – DCA Level – Digital Output Points
Table 7-50: IEC 104 with MCP as Master – DCA Level – Digital Output Points
IEC 103 with MCP as Master – Device Level – Digital Input Points
Pseudo Point Name Description
Device Online Indicates if the communications with the Device is Active (1) or Inactive (0).
The DCA sets this to ON after the initialization procedure with a device completes
successfully.
The DCA sets this to OFF after communications has been lost with the Device or
when the Device is Disabled.
DeviceDisable Indicates if the communications with the Device is disabled. Reflects the status of
the DisableDevice Digital Output pseudo point or’ed with the DisableAllDevices
Digital Output pseudo point.
PollingDisabled Indicates if the scheduled polling of the Device is disabled. Reflects the status of
the DisablePolling Digital Output pseudo point or’ed with the DisableAllPolling
Digital Output pseudo point.
IntergrityPollExecution Indicates the status of Integrity Poll. In progress (pending: 1) or completed (0).
Integrity Poll can be manually triggered either by IntegrityPoll or
IntegrityPollAllDevices Digital Output pseudo points
TimeSyncExecution Indicates the status of Counter Integrity Poll. In progress (pending: 1) or completed
(0).
The Counter Integrity Poll can be triggered by either the CounterIntegrityPoll or
CounterIntegrityPollAllDevices Digital Output pseudo points
DeviceRestarted Toggled when Restart or Power On indications are received from the device.
Restarted (1) and Running (0)
Applicable only to the IEC 60870-5-103 Client.
IEC 103 with MCP as Master – Device Level – Digital Output Points
Pseudo Point Name Description
DisableDevice This control enables or disables communications with the Device.
DisablePolling This control disables or enables scheduled polling of the device.
IntegrityPoll When a control request is received from this point, the DCA sends one general
interrogation to the device.
TimeSync When a control request is received from this point, the DCA issues time
synchronization to the device.
IEC 103 with MCP as Master – DCA Level - Digital Input Points
Pseudo Point Name Description
DCAStatus Indicates the status of the IEC 60870-5-104/101 DCA application.
Set if IEC 60870-5-104/101 DCA is running.
Reset if IEC 60870-5-104/101 DCA is not running.
AllDevicesDisabled Indicates if all the configured IEC 60870-5-104/101 DCA is disabled.
Set if all the IEC 60870-5-104/101 DCA is disabled.
Reset if all the IEC 60870-5-104/101 DCA is enabled.
AllPollingDisabled Indicates if the scheduled polling of all Devices is disabled.
Set if polling of all IEC 60870-5-104/101 DCA is disabled.
Reset if polling of all IEC 60870-5-104/101 DCA is enabled.
IEC 103 with MCP as Master – DCA Level - Digital Output Points
Pseudo Point Name Description
DisableAllDevices This control disables or enables communications with all Devices belonging to the
IEC 60870-5-104/101 DCA.
IntegrityPollAllDevices When a control request is received from this point, the IEC 60870-5-104/101 DCA
sends one general interrogation to each IEC 60870-5-104/101 slave.
TimeSyncAllDevices When a control request is received from this point, the IEC 60870-5-104/101 DCA
issues time synchronization to each IEC 60870-5-104/101 slave.
DisableAllPolling This control disables or enables scheduled polling of all IEC 60870-5-104/101
slaves.
Enable Test Flag This flag enables Test Mode for controls that go to the devices. Disabled (0)
in Controls Enabled (1)
Pseudo Point
Description DO status set to
Name
Primary Indicates if Primary channel is In Use or Not In use. In use status means this Not In Use (0)
Channel channel is the active channel and the association is up on this channel. In Use (1)
Status
Secondary Indicates if Secondary channel is In Use or Not In Use. In use status Not In Use (0)
Channel means this channel is the active channel and the association is up on this In Use (1)
Status channel.
Overflow (1)
Report Buffer Indicates if the device has reported a buffer overflow condition in one of its No Overflow (0)
Overflow buffered report control blocks. Overflow (1)
Retrieve All Operation to retrieve All Data Sets from device that was triggered by either Completed (0)
Data Sets the “Retrieve All Data Sets from All IEDs” or the “Retrieve All Data Sets from Pending (1)
from IED IED” pseudo Digital Output is either completed or under way.
Status
DeviceDisable Device is enabled or disabled as controlled by the DisableDevice Digital Disabled (1)
Output or the Global “DisableDevice” Digital Output. Enabled (0)
Polling of IED Polling is enabled or disabled as controlled by the “Enable Polling to IED” Disabled (0)
Status Digital Output or the “Enable Polling of All IEDs to IED” Digital Output. Enabled (1)
Configuration Indicates whether the most recent configuration comparison for this Failed (0)
Comparison device failed. The application compares the composition of the device’s The DCA logged
Status Data Sets with what it has configured locally. the discrepancies
it detected.
OK (1)
There were no
discrepancies in
the most recent
comparison.
Device Online Indicates whether communications with the device is Active (Online) or ON (1)
Inactive (Offline) OFF (0)
For enhanced security controls, a non-zero value indicates failure; a zero value indicates success. A positive value
indicates one of the IEC 61850 Additional Causes was reported by the device. A negative value larger than -255
indicates a low-level MMS error was reported by the device. A value of -255 indicates another error condition not
specifically listed has occurred.
Load Shed
LogicLinx
Secure Connection State State of unit when Modbus TCP/SSH Master is configured. This pseudo point state
is offline or invalid for ModbusTCP and Modbus Multidrop Master configurations.
State is one of the Secure Connection States defined in the Secure Connection
States table. State is presented as an enumerated text both in the Point Details
or IED Connections.
Secure Connection State State of unit when Modbus TCP/SSH Master is configured. This pseudo point state
is offline or invalid for Modbus TCP and Modbus Multidrop Master configurations.
5. Enter UR 7.6’s Administrator Username & Password to copy the MCP’s public key into UR 7.6.
Result: This file is saved by default as “m2m_user.pk2” and available in the folder "/ata0a/pkey_ssh/” in
UR 7.6.
Result: Upon success, MCP will get one M2M user from UR for all Key based authentications.
Result: The possible states of the Pair button are described in the Secure Connection States table.
The Pair button in the HMI is only available to Administrator users. This button is only
applicable to Modbus TCP/SSH Clients.
The Rotate button in the HMI is only available to Administrator users. This button is only
applicable to Modbus TCP/SSH Clients. The Key Rotate button is enabled when the IED is
paired successfully using SSH Key Pair.
State Description Status of Pair & Rotate Buttons in IED Comm Summary
8 Pairing is in-progress and previous rotate Pair button is greyed out and Rotate buttons is enabled.
state is failed. Pair button state shows “Pairing” and Rotate button shows
“Failed”.
9 Previous Pairing is Failed and Rotate is yet to Pair and Rotate buttons are enabled.
be done. Pair button state shows “Failed” and Rotate button shows
“Rotate”.
10 Previous pairing state is failed, and current Pair and Rotate buttons are enabled.
rotate state is successful. Pair button state shows “Failed” and Rotate button shows
“Rotated”.
11 Previous pairing state is failed, and current Pair button is enabled, and Rotate buttons is greyed out.
rotate state is in-progress. Pair button state shows “Failed” and Rotate button shows
“Rotating.
12 Previous pairing state is failed, and current Pair and Rotate buttons are enabled.
rotate state is failed. Pair button state shows “Failed” and Rotate button shows
“Failed”.
13 Not applicable Not applicable
Redundancy Manager
Accumulators
Pseudo Point Name Description
UpdateCount Accumulation for the total number of points in the RTDB that have been updated for
this SEL device.
MsgSent Accumulation for the total number of messages sent by the SEL Binary Client to the
SEL device.
MsgReceived Accumulation for the total number of messages received by the SEL Binary Client from
the device. It is incremented immediately after a message has been successfully
received from the device.
MsgTimeOuts Accumulation for the total number of message timeouts detected by the SEL Binary
Client for the device. It is incremented every time the device has failed to respond to a
Request within the allowed timeout.
MsgError Accumulation for the total number of frames received in error from this SEL Slave.
Analog Input
Pseudo Point Name Description
LF_YEAR Indicates the year of the Last Fault Report.
LF_MONTH Indicates the month of the Last Fault Report.
LF_DAY Indicates the day of the Last Fault Report.
LF_HOUR Indicates the hour of the Last Fault Report.
LF_MIN Indicates the minute of the Last Fault Report.
LF_SEC Indicates the second of the Last Fault Report.
LF_MSEC Indicates the millisecond of the Last Fault Report.
LF_DISTANCE Indicates the Fault Distance reported in the Latest Fault Report.
LF_CURRENT Indicates the Fault Current reported in the Latest Fault Report.
LF_DURATION Indicates the Fault Duration reported in the Latest Fault Report.
LF_FREQUENCY Indicates the Fault Frequency reported in the Latest Fault Report.
Digital Input
Pseudo Point Name Description
Device Online Indicates if the Configured SEL device is:
• ONLINE (1) or
• OFFLINE (0).
DeviceDisable Indicates the disabled status of SEL Binary Client Application
NOTE: If “DisableAllDevices” control is Disabled, the DeviceDisable DI Pseudo
Point will be Disabled. If “DisableAllDevices” control is Enabled, the
DeviceDisable DI Pseudo Point will be Enabled only if “DisableDevice” DO Pseudo
Point is Enabled.
Set to Enabled if the status of device is Enabled.
Reset to Disabled if the status of device is Disabled.
Primary Port Status Indicates the usage of configured Primary Port.
Set to IN USE if Primary port is in use.
Reset to NOT IN USE if not in use.
Backup Port Status Indicates the usage of configured Secondary Port.
Set to IN USE if backup port is in use.
Reset to NOT IN USE if not configured.
IEDCommDevTrouble This status point is set when the SEL Binary Client receives a DEVICE TROUBLE
status from the relay. The status point is reset .otherwise.
LoginStatus Indicates the login status for SEL device.
DIGLF_A Indicates that phase A was involved in the Last Fault Reported.
DIGLF_B Indicates that phase B was involved in the Last Fault Reported.
DIGLF_C Indicates that Phase C was involved in the Last Fault Reported.
DIGLF_G Indicates that ground was involved in the Last Fault Reported.
His_cmd_support Indicates support for HIS command for SEL device.
Eve_cmd_support Indicates support for EVE command for SEL device.
Cev_cmd_support Indicates support for CEV command for SEL device
File Retrieval In-Progress Value ‘1’ indicates that file retrieval from the SEL device is in-progress.
Value ‘0’ indicates that file retrieval from the SEL device is not in-progress.
Pass Through In-Progress Value ‘1’ indicates that data transfer through the Pass-Through connection with
SEL device is in-progress.
Value ‘0’ indicates that data transfer through the Pass-Through connection
with SEL device is not in-progress.
Digital Output
Pseudo Point Name Description
DisableDevice This control enables or disables the running state of the device.
When Set to Enabled, the device is enabled.
When Reset to Disabled, the device is disabled and is declared as OFFLINE.
ClearStats This control clears all the communication statistics (MsgSent, MsgReceived,
MsgTimeouts and MsgErrors) Pseudo Points of the device.
Enable Polling Of IED This control disables or enables polling to the device.
If set to Disabled, the polling to the device is stopped.
If reset to Enabled, the polling to the device resumes.
Text Points
Pseudo Point Name Description
DEVICEINFO_LINEID Indicates the Line id of the SEL device.
DEVICEINFO_DEVICEID Indicates the Device id of the SEL device.
DEVICEINFO_BAYID Indicates the Bay id of the SEL device.
DEVICEINFO_DEVICETYPE Indicates the map file name of the SEL device
DEVICEINFO_DEVICEADDRESS Indicates the SEL Device address
PRF_TEXT_POINT Indicates the Protective Relay Faults (Supported in the SEL relays such as 487,
551, 734 & 651)
MapFile Indicates the device type.
Session Uptime in Minutes Indicates the time in minutes MCP runs after the reboot
Total Uptime in Minutes Indicates the time in minutes MCP runs since first power on
Total System Memory in MB Indicates total system memory in MB available in MCP
Free Memory Available in MB Indicates the total free memory in MB available in system
Select the document format for viewing the content in pdf or HTML.
This document is for a generic Predix Edge device or VM. For the MCP, the following exceptions apply:
• Configuring the Network Time Protocol from PETC is not supported
For further exceptions refer to the following sections keyed to the same headings in the Predix documentation.
Device Status
The MCP Edge device has the following additional parameters
Type Description
• Memory – Size of physical RAM
Details
• Storage – Size of disk drive
Other parameters shown in the generic Predix Edge documentation may not be available in the MCP device
due to PETC version differences.
2. Ensure the Protocol is set to SSH and enter the MCP credentials to connect (for example):
• Host Name: 192.168.168.81
• Port: 22
• Password: defadmin
2. Ensure the Protocol is set to Serial Port and confirm the settings before selecting Connect:
• Serial Port: Select the serial port used by your PC for the MCP serial maintenance
connection
• Username: defadmin
• Password: defadmin
The Secure File Browser tool is recommended over third-party tools like WINSCP® because the Secure File
Browser is implemented with a session timeout.
If other third-party file browser tools must be used, close the session as soon as possible after use and disable
the cached password option if supported by the tool.
2. Enter the Host name / IP address, port and user/password, for example:
NOTE: When a response is not received within the Transaction timeout period for all the configured number of
retries, the device is put OFFLINE along with all respective points.
A response received after the device is put OFFLINE is ignored.
An OFFLINE device resumes communication only after the Reconnect Interval duration.
When the OFFLINE device communication resumes, it always resets and starts with the first transaction.
NOTE: When responses are not received within the transaction timeout period for all the configured number of
retries, but are received within the Device response timeout, responses are accepted and processed.
• Inter Device Delay: Configure required delay between two consecutive IEDs
Connection Page:
• IED Address: 1241
Client Map File:
• Start of Message: 123
• End of Message: #
Rsync utility
The rsync package is open-source software that enables the rsync utility on a Linux-based computer.
The rsync utility/software synchronizes files and directories from one location to another while minimizing data
transfer using delta encoding when appropriate. An important feature of rsync not found in most similar
programs/protocols is that the mirroring takes place with only one transmission in each direction. Since rsync
does not provide any security while transferring data it is recommended that you use rsync over an SSH session.
This allows a secure remote connection.
Installation Steps
Use any one of the following commands to install rsync. If you are using Debian or Ubuntu Linux, type the
following command:
# apt-get install rsync
or
$ sudo apt-get install rsync
If you are using Red Hat Enterprise Linux (RHEL) / CentOS 4.x or older version, type the following
command:
# up2date rsync
If you are a RHEL / CentOS 5.x or newer (or Fedora Linux) user, type the following command:
# yum install rsync
NOTE: Since rsync does not provide any security while transferring data it is recommended that you use rsync
over ssh session. This allows a secure remote connection.
For example:
In the below line from the crontab file, the test.sh script runs every minute on the second half of every hour.
where 30-59 is specified in the Minute field and the remaining fields specified with ‘*’.
NOTE 1: The control file /etc/crontab:
• Needs to be copied to /mnt/usr/MCP_SysConfig/etc/ so that the changes done are persisted across
reboots.
• Can only be modified by root users or users with elevated root permissions.
NOTE 2: If you are running a script, the script should:
• Have executable permissions.
• Be copied to persistent storage to retain them across reboots.
GE is not responsible for the Cron jobs written by users.
mcpcsb
mcpsi
Good USB
Corrupted USB
No USB
Install XCA
1. Download the latest version of XCA from here: http://sourceforge.net/projects/xca.
2. Run the installation wizard to install XCA.
4. Under the Source tab, select the checkbox next to the label Create a self-signed certificate with the
serial. Leave the dropdown named Signature Algorithm as “SHA 256” and leave the dropdown
named Template for the new certificate as “[default] CA”.
5. Under the Source tab, click Apply All.
6. Under the Subject tab, click the button labeled Generate a new key.
7. In the dialog that appears, enter the name of the CA (e.g., “MyCA”) in the Name field. Choose the
Keytype as RSA Change the Keysize to 2048.
8. Under the Subject tab, enter the distinguished name of the CA certificate. The following table provides
example distinguished name components.
Note: You must enter all components of the distinguished name, including the email Address.
Table 8-1: Example Distinguished Name Components
Distinguished Name Component Example
Internal name MyCA
countryName US
stateOrProvinceName MyState
localityName MyCity
organizationName MyCompany
organizationalUnitName MyDivision
commonName MyCA
emailAddress mail@my.domain
9. Under the Extensions tab, if necessary, change the Time Range that the CA certificate is valid for and
click Apply. The default is 10 years. Certificates generated with this CA certificate after this period are
no longer valid.
10. Under the Key usage tab, do not change the defaults.
11. Under the Netscape tab, remove the value in the Comment field.
12. Under the Advanced tab, the following messages are expected except the value of the X509v3 Subject
Key Identifier, which differs from key to key:
Certificate Generation
This section describes how to generate private keys and certificates for the MCP https web server. These
certificates allow the MCP to authenticate itself to the Client.
• In the Signing section, select the certificate that will be used to sign the new certificate.
Select the radio button next to the label Use this Certificate for signing. On the
dropdown to the right of this checkbox, select the CA you created in section Create a
Database and Initialize the CA (e.g., MyCA).
4. Click the Subject tab.
• Please enter the Distinguished name of the MCP server certificate.
Note: You must enter all components of the distinguished name, including the email Address.
Table 8-2: Example Distinguished Name Components
Distinguished Name Component Example
Internal name MyMCP
countryName US
stateOrProvinceName MyState
localityName MyCity
organizationName MyCompany
organizationalUnitName MyDivision
commonName MyMCP
emailAddress mail@my.domain
5. Under the Subject tab, click the Generate a new key button.
• In the dialog that appears, enter a name that uniquely identifies the MCP in your network
(for this example, that is “MyMCP”). Choose Keytype as RSA and change the Keysize to
2048. Click OK.
Installing Certificates
This chapter describes how the CA Certificate, Server Certificate, Server key is installed on your Windows PC
and MCP respectively. The following table summarizes where to get the files containing the CA certificate,
Server certificates and key.
Table 8-3: Location of Files Exported by Certification Authorities
Files Location
CA Certificate The CA certificate is in a file downloaded to a location of your choice as described in
Section Create a Database and Initialize the CA. The file is named with a .crt extension
(e.g., MyCA.crt).
Files Location
Server Server certificate is in the file under the location of your choice as described in Section
Certificate Creating a CA-Signed Server Certificate. The file is named with a .crt extension (e.g.,
MyMCP.crt).
Server Private Server private key is in the file under the location of your choice as described in Section
Key Creating a CA-Signed Server Certificate. The file is named with a.pem extension (e.g.,
MyMCP.pem).
The reason for this warning is that the MCP file system does not support per-file permissions, so when
WinSCP tries to set the permissions on a file, it is unable to do so. However, there is no security risk
because the file takes on the default permissions of the files system which are correct. Therefore, this
warning can be safely ignored by clicking Skip. To prevent this warning from appearing in the future, in
WinSCP go to Options > Preferences. Then select Transfer and click Edit button and select Ignore
permission errors in upload options.
3. Click Install Certificate button. Following dialog will open. Click Next.
4. Click Next and in Certificate Import Wizard select Place all certificates in the following store option.
5. Click Browse and in Select Certificate Store Dialog Select Trusted Root Certification Authorities and click OK.
After this step you may use the MCP Runtime HMI Viewer for secure communication with the MCP device.
Remote Force/Substituted R
Operator Blocked Op
Local Suppressed P
Offline/Failure O
Scan Inhibited S
Alarm Inhibit A
Comm Lost CX
Questionable?
Inaccurate <>
Inconsistent!
Old Data OD
OverflowOF
Application
Restart R~
Tagged T
Zombie Z
Invalid X
Test TS
BEH
Client
Application
s - Both
field &
pseudo
points
dnpdca Y Y N Y Y Y Y Y Y Y N N Y N Y Y Y Y N N Y N Y Y Y Y Y Y Y N/A
modbusdca Y Y N Y Y N N N N Y N N N N N Y Y Y N N Y N Y Y Y Y Y Y Y N/A
iec103dca Y Y Y Y Y N Y Y N Y N N Y N N Y Y Y N N Y N Y Y Y Y Y Y Y N/A
iec101-
104dca Y Y Y Y Y Y Y Y N Y N N Y N Y Y Y Y N N Y Y Y Y Y Y Y Y Y N/A
snmpdca Y Y N Y Y N N N N Y N N N N N Y Y Y N N Y Y Y Y Y Y Y Y Y N/A
d20plcdca Y Y N Y Y Y Y Y Y Y N N N N N Y Y Y N N Y Y Y Y Y Y Y Y Y N/A
iec61850dca Y Y Y Y Y Y Y Y Y Y Y Y Y N N Y Y Y N Y Y Y Y Y Y Y Y Y Y N/A
selbindca Y Y N Y Y Y Y Y Y Y N N N N N Y Y Y N N Y Y Y Y Y Y Y Y Y N/A
genasciidca Y Y N Y Y N N N N Y N N N N N Y Y Y N N Y Y Y Y Y Y Y Y Y N/A
N/A
846
Points
Points
field &
Server
iec101-
Pseudo
pseudo
104dpa
Application
dnpdpa
s - Only
s - Both
iec61850dpa
Application
Application
isaker(logicli
Automation
Logic Based
Y
calculator Y
modbusdpa Y
Y
Y
Offline/Failure O
Y
Y
Y
Y
Y
Comm Lost CX
N
N
N
N
N
Test TS
Y
Y
Y
Y
Y
Invalid X
Y
Y
Y
Y
Y
MCP Software Configuration Guide
Questionable?
N
N
N
N
N
OverflowOF
N
N
N
N
N
Over Range/Out Of Range OR
N
N
N
N
N
Chatter/Oscillatory XX
Y
Y
Y
Y
Y
Refence Check/Bad CK
Y
Y
Y
Y
Y Old Data OD
Y
Y
N
N
N
Inconsistent!
Y
Y
N
N
N
Inaccurate <>
N
N
N
N
N
N
N
N
N
N
N
N
N
N
N
Restart R~
SWM0101-3.11-1
Y
Y
Y
Y
Y
Tagged T
Y
Y
Y
Y
Y
Local Suppressed P
Y
Y
Y
Y
Y
N
N
N
N
N
Remote Force/Substituted R
N
N
N
N
N
Operator Blocked Op
Y
Y
Y
Y
Y
Scan Inhibited S
Y
Y
Y
Y
Y
Alarm Inhibit A
Y
Y
Y
Y
Y
Y
Y
Y
Y
Y
Zombie Z
GE Information
N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A
BEH
ts
arrm
Other
ssmgr
points
pseudo
Application
s - Only
Application
analogrepor
Automation
Y
syspointmgr Y
loadsheddta Y
redunmgr Y
digevtmgr Y
N
N
GE Information
Offline/Failure O
Y
Y
Y
Y
Y
N
N
Comm Lost CX
N
N
N
N
N
N
N
Test TS
Y
Y
Y
Y
Y
N
N
Invalid X
Y
Y
Y
Y
Y
N
N
MCP Software Configuration Guide
Questionable?
N
N
N
N
N
N
N
OverflowOF
N
N
N
N
N
N
N
Over Range/Out Of Range OR
N
N
N
N
N
N
N
Chatter/Oscillatory XX
Y
Y
Y
Y
Y
N
N
Refence Check/Bad CK
Y
Y
Y
Y
Y
N
N
Old Data OD
Y
Y
Y
Y
Y
N
N
Inconsistent!
Y
Y
Y
Y
Y
N
N
Inaccurate <>
N
N
N
N
N
N
N
N
N
N
N
N
N
N
Restart R~
SWM0101-3.11-1
Y
Y
Y
Y
Y
N
N
Tagged T
Y
Y
Y
Y
Y
N
N
Local Suppressed P
Y
Y
Y
Y
Y
Y
Y
Remote Force/Substituted R
N
N
N
N
N
N
N
Operator Blocked Op
Y
Y
Y
Y
Y
N
N
Scan Inhibited S
Y
Y
Y
Y
Y
N
N
N
N
Alarm Inhibit A
Y
Y
Y
Y
Y
N
N
N
N
N
N
N
N
N
N
Y
Y
Y
Y
Y
Y
Y
Zombie Z
N/A
N/A
N/A
N/A
N/A
N/A
N/A
BEH
847
MCP Software Configuration Guide Glossary
Glossary
A
HSV: hue/saturation/value (color palette)
AD: Active Directory
HTTP: HyperText Transfer Protocol
B
HTTPS: Designated the use of HTTP but with a
BG: Background different default port and an additional
C encryption/authentication layer between HTTP and
TCP
CHP: Combined Heat and Power. A CHP unit is a
cogeneration system. I
CRL: Certificate Revocation Lists IRIG-B: Inter Range Instrumentation Group (IRIG) -
an American standardized network time code
D format
DAN: Double Attached Node J
DCA: Data Collection Application. Also referred to JRE: JAVA Runtime Environment
as client application
L
DNP: Distributed Network Protocol
LAN: Local Area Network
DPA: Data Processing Application. Also referred to
as server application. LDAP: Lightweight Directory Access Protocol
DTA: Data Translation Application. Also referred to MAC: Media Access Control
as automation application. MCP: Multifunction Controller Platform
F MPC: Model predictive control
FG: foreground mSQL: Mini Sequential Query Language - provides
G fast access to stored data with low memory
requirements
GUI: Graphical User Interface (also called Human
Machine Interface – HMI) N
HMI: Human Machine Interface (also called NVRAM: Non-Volatile Random Access Memory
Graphical User Interface – GUI) O
HMI Client: Client-side functionality that resides in OLV: One-Line Viewer
the user’s browser
P
HMI Server: Server-side functionality that resides
on the MCP and provides services to the client-side P: Active Power
browsers PRF: Protective Relay Fault
HSL: hue/saturation/lightness (color palette) PRP: Parallel Redundancy Protocol
Q
Q: Reactive Power
R
RBAC: Role Based Access Control
RGB: Red/Green/Blue (color palette)
RGE: ratio for gas-to-electricity
RGH: ratio for gas-to-heat
RTC: Real-time clock
RTDB: Real-time database
S
S: Apparent Power
Secure SCADA: Secure SCADA is a term used to refer
to a number of features built into the MCP
Substation Gateway to facilitate encrypted
communications and identity verification.
sFTP: Secure File Transfer Protocol
SNTP: Simple Network Time Protocol
SOE: Sequence of Events
SSH: Secure Shell
SSL: Secure Socket Layer
T
T: Torque
TFTP: Trivial File Transfer Protocol
TCP: Transmission Control Protocol
U
UR: Universal Relay
URL: Universal Resource Locator
Modification Record
Version Revision Date Change Description